{"timestamp":"2026-02-10 22:04:06","ip":"78.46.49.27","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-02-10 22:04:12","ip":"78.46.49.27","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-02-10 22:04:18","ip":"78.46.49.27","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-02-10 22:04:18","ip":"78.46.49.27","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 13:10:05","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-03-04 13:10:05","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-03-04 13:10:09","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 13:11:02","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 13:28:38","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 13:28:43","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 13:29:01","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/CLAUDE.md"},"result":null}
{"timestamp":"2026-03-04 13:29:03","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/docs\/SPEC.md"},"result":null}
{"timestamp":"2026-03-04 13:29:04","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/.git\/config"},"result":null}
{"timestamp":"2026-03-04 13:29:18","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/CLAUDE.md"},"result":null}
{"timestamp":"2026-03-04 13:29:22","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/CLAUDE.md"},"result":null}
{"timestamp":"2026-03-04 13:29:27","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/docs\/SPEC.md"},"result":null}
{"timestamp":"2026-03-04 13:29:32","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/.git\/config"},"result":null}
{"timestamp":"2026-03-04 13:29:40","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt"},"result":null}
{"timestamp":"2026-03-04 13:29:47","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-plugin.php"},"result":null}
{"timestamp":"2026-03-04 13:29:55","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php"},"result":null}
{"timestamp":"2026-03-04 13:29:56","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php"},"result":null}
{"timestamp":"2026-03-04 13:29:56","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-cart-handler.php"},"result":null}
{"timestamp":"2026-03-04 13:29:57","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-product-type.php"},"result":null}
{"timestamp":"2026-03-04 13:29:57","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-installer.php"},"result":null}
{"timestamp":"2026-03-04 13:29:58","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-logger.php"},"result":null}
{"timestamp":"2026-03-04 13:29:58","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-rest-api.php"},"result":null}
{"timestamp":"2026-03-04 13:29:59","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-watchlist.php"},"result":null}
{"timestamp":"2026-03-04 14:03:15","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-03-04 14:03:15","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-03-04 14:03:31","ip":"2a01:4f8:110:1444::2","action":"file_write","params":[],"result":null}
{"timestamp":"2026-03-04 14:03:37","ip":"2a01:4f8:110:1444::2","action":"file_read","params":[],"result":null}
{"timestamp":"2026-03-04 14:03:43","ip":"2a01:4f8:110:1444::2","action":"file_read","params":[],"result":null}
{"timestamp":"2026-03-04 14:03:54","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:04:00","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"..\/tmp\/kloktion-v3.0.1.zip","content":"UEsDBAoAAAAAAPZqZFwAAAAAAAAAAAAAAAAGABwAYWRtaW4vVVQJAAM\/FqhpPxaoaXV4CwABBCEAAAAEIQAAAFBLAwQKAAAAAAD2amRcAAAAAAAAAAAAAAAADgAcAGFkbWluLy5naXRrZWVwVVQJAAM\/FqhpPxaoaXV4CwABBOgDAAAE6AMAAFBLAwQKAAAAAAD2amRcAAAAAAAAAAAAAAAADAAcAGFkbWluL3ZpZXdzL1VUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAABQSwMEFAAAAAgA9mpkXCUi4ZuQAwAAPhIAABgAHABhZG1pbi92aWV3cy9zZXR0aW5ncy5waHBVVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAzVjbbtNAEH3PV4wspBSpIdeWFpJU5SYqihS1fUPI2tgTvKrtXfaStoiPZy9OGgcHDCG0ebE8mcvZmZMzjocnPOEQ44zmGO9B8\/TV5eT06n0TnsL374C3VL2Ek3FjGNM5RCmRchTcCMKDcQPMZ5h0x0OXAWUUJipLQzRJPqTsWlGWwyUqRfMvsrkPzevC2Iq1ipIW0ZG9M4VsgWHbZGr4nDMmMshQJSweBZxJFQBxvqOgKOvcXNkbHuYsjzCcUUwt\/kWVUJI5hrKi\/tLoIwsAjfvEikxTXBzWgmk5y0pt7ybKBm9MQEaM4ygQ7CYYD1MyxRRMklFgekx0qsJYC2JxBFWde+Od4E3hVKNxroS5qqQKT\/yz0X0hMcVIQU4yrIAGNK4CXJnKpWPczXtOUm3y9Q87naCYkC9kufVk0fhPzfXUzc9wcgJHh4NOZx9stD9cVYe6kDAtavTFQ6qNuTsYbAPahW9GPXCo6\/wO\/hD2oN\/bBrYL\/0Wze7vC7er\/PW532Yy7t7N+9w6Ot2q4j9+MvA8xudsB7sPO4Ggb3D5+M+7n\/wL3sO2BVQhZe13JjEVsqcicaIm\/1uNzIhW8TohZFDCx7jsTZJpzrUDdWaS5zqYogkKd12A6bV63FVMuThAlzB2DKCVKIy6H+QF3j4qxBpBRs2P7hiUZuV2oeHts2BKxPJbVuPliU8amoqB8YyvfsxtIWf4FFAOHA4gCgRLFHIELajo8RTMXNE8dnAoD+BkU6\/CFA7nXtwC1Qvn0WY0x8P\/EoplA\/IahohkyrSqPPnGne+cc4co7PgCR1pA6Iq3bahKpHOaJtFzbBZEOd00kYi7RNcYQEaEKCgnMCM2lPQeNVwhkwe11O4+SQebXiGFKM1rNntPJGVwYFzi3Lg\/AmxV8jjOr9zX5ch+y4EqJKt0lVQqmCPyqUSrZ9vPakjEfyS3NdAYXby+vwLZzkR44CjibuIuvVKLMYyIJZ2ka0lwZuSRptcoYD9NtOCucHmJVlUD6TVU21V1Uq1GeMr0yY5aE+cfKwmYKc1AJwkwwAyCPwYKRdgqFxmgeGzrLFar0HhVTBItQStPI3yylhRucGxl9wL1UAdhTp8Jelz8\/hXoSHa\/tqG5v90sqSjC6NgjctrJSI6mVnuJhh2jFWsI89hK5Kj7Hbl8d7HpfmTv7bmP19Yf\/g6CnRqvDqVaK5Xv+DYn3ty9Exo1hO6bzceMHUEsDBBQAAAAIAPZqZFxEGk2XvQcAAF8cAAAZABwAYWRtaW4vdmlld3MvZGFzaGJvYXJkLnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAAC1Wf1y2zYS\/99PgSpyKXUk21JqJ5UsaVxbufia2hnL7c2N6+GAJChhDJEsCMZ2m87cQ9wT3pPc4oNfEiUxTSJ7xiK4+9tP7C7g00m0iPY84tOAeC1knf04e392+9ZCbfTxIyJPVAz39uYsdDBDzcfIc+CxGQssktj2KROEoxGicUxECzXtf0xv7yz91roHiAmKcUAF\/YPYgjwJ4CDMqyIcIMsa7jUjPCceSj+rwOqtwV3ipxbqdRB2YhpUkUjMnoQk3JarKWT\/SFrwuCCcwFMjWh4sicD2A3mGR8t+YOGDoGFgG+XQ2dUFig6iMBZmSZJFicNovLAaSmeOl3L17h6QqY9AmbKD2ujPPSncSD0AAA1rZH\/ALJHK7MfgA0WoMe\/uYbGMNdz7C7R3wyQAdX5n0oLZ9N30\/BadX\/9yddu6uJzdXl7BI2ArnanXRm9urn9Gf6rodcdyVUr9C0jQ5dXV9Ab98\/ryqvQ+hpfo+grsvrwAETkW+tfb6c3UGCKNF6GAxNCebUEg2tJ645EJMpBzIsBG3kqfI06AhMBzZkgHHRwcpIw6eGvMudVAIIMY+j6khxGOTPJ0UQ\/ef4eywIOWvyeEP6\/4q2DUV\/IPur65AO4f\/63pLqazc\/Tu8ufLW7Tvoes3b2ZT+U16ETNmZ2mEOcfP9pLwOcl82UF3uUEdlFp+L\/3QjHjoJa4UL9kLbnNDVuHzzBna5wXZxq0qpkqSxHMJlSg60Ie5FppWJ6civFOpa1ko379jZNuypjBmdZCVbq2ulwh30cWgMzxBpeloTgzPH4hV4tRLNZhjd0G8hMHmz5hn2VIN\/giDGV5J+DscC3S+wIFbT4OQeVbZ8JlcqsFKniLKtfSUdWqW6ggWYRSVuWdmaTu3rFdNB3tzYrsMx6UwloNhOdh9mHPYgN7gBXntH5MfhpBdIR+86JNX3sv+0KqMQ4nP9\/2X5CjlIyfHvaOjjK\/s\/zKfS74nbsrnnvRf91\/nfDx0SQw9YG6t6fnS7\/teytc7Pjl2c3nlaG2xr+cck37OVw5VWc9j+ZPynfTkTy6vFKQt9jmvem7PlXwQnsl479SjH5AKz6jxyHHUGCvA00VvfCp7NyKxay\/Ektmwua2fTLTRmY5zvDUFhmgyPj0EpD2NmbBUUpw4+teIU6+VOD\/kBLuLvMtB1uAYNVUDHaMmww5hqoBPclbFzmh5QS1itODEHzWMLe4iVAYlHIoO9jxbVyvM5y2UzgsdJQxav7ekgaa01PcDgJjI2jTKLMapG1RTUQY31pSAjzG7oMXqkDMaaRsnyHITzkkgLD21SMh1w3KHZTbJILUyBw1X\/aM4DnHFYkEpqcE3o7RJwJMNiotiLORwZKGPuXLlIBwWo2CQA88ENSM\/PUxYmhQCO4xkGRh1YfARXb34SGFwxAL59Ak6byw4hRRvwJdnRkaNJUSNBl1I\/EHvKHoaFlNJLAj2VlQTvMJ2sUjhQJhYDPrH+wBUkfnvdReske9iUSmnCnQmMBfoPac7WsAnA5\/rFPoa0DckJnxH0\/w7jtBb7wti3tIlQe+I\/4Vjdla78K2CwkohBeX7UpKeCif0nldYlHw19JNlJJ7lxFYYx9pVhVBj8fGp8BAU\/TjCwajxqjKpr0KUVjAovNAtDuqY5Y3LluSKEhaTDQqtFveiGbK+RzDdgjGVhS4lhvHh0bXl6GkWWuZQoLmHlczKed\/kGG1wSiBokMDkXi3NnMPMZ4R+S7veb6br2dMAKg8ZDKQqmrqOJhKYS91hTyrgls9CDEzKIjnhy4NBS2F0Vs6KKR\/ER\/CEbBTB9e40QuqLKPHtEmIaVCZks4NczNyEYWGAa3lJwL61GezbWu5X1JwsMQ1gSKslQI+kquwrAeUZ9S5LgHs0mah7g1WEivyWn8oOk7\/0Nr9UBNtGFWkp8aiJIaPBQyvdMu0tE0IJH\/pnGMzH1VOD2R36YBfgJWm10\/1u+LYrXzVYlAgcKEjxEk6D4xcbNFAR0xIV3WZXHm7zpXR0QcJjZD9AVJXjWrJ8mEQsbcZ2obZtB1534kYB5V2y6s4vY0R5u9c2Y3uoZMdIpyKPxhHDzwMaQNKRrsNC92EYweQMm23Qj57Qa5i8nJB7hHc59mgSD17Cig8lthvTP8ig108fHwmdL8TgBE5lKxmAhZAXMMV9WTurq3IJXCzCBM5DPJtcU9\/syGJp+uck3nb4vJkXitwYHaFvv0Vw1FBDd6axvJNJj8md7ADbKR2B79NCvWkOqOWu+dKDCg3jwNsBHajzT65dLbdlvV\/ZZs6+6kSTOb++djupmhL\/kxtczrSjuxU\/QB8Iv5UPTemtC4JTyf72GbCzpfTkBuhj405FakegnqP\/95\/\/1sELPOpvjf7nbojPannpmdFJhAgDpP90Ve+oXziK0\/AUpO2cfz+zDe6yGGoWGPBpxiLoZMA7atgOw8HD3zP+V0oev6LxmzNl\/SxR0HD96mCNYCVFAS4\/RsGDvEhIrxqK9bdwCT1WV\/qljVO8FVMQAf6AnBCcvlxxbxVlV+FWxKG6wKksABYayEFZBh+OE3eVzrIcHGe3pqv3V\/qfUxDD\/Rf72fXtGgI4dImFpe8JrQ1E2RWUvHJTuBsIlR\/NrWPRqevk91V1bu36CLxZjGX2uBpu8+r\/UEsDBAoAAAAAAHN\/ZFwAAAAAAAAAAAAAAAAJABwAaW5jbHVkZXMvVVQJAAPKOqhp3TqoaXV4CwABBOgDAAAE6AMAAFBLAwQUAAAACABMY1VcxGLAiFIFAAD6EwAAGAAcAGluY2x1ZGVzL2NsYXNzLWRva2FuLnBocFVUCQADUIiZaQchqGl1eAsAAQToAwAABOgDAAClV1tvIjcUfudXnKzQziCRS1fdqoKQKN1U22jTJGpS7UMaWWbGgJthTG0PKery33vsuXkuhMDyAsMcf9\/xuZ\/T88Vs0YnpnKkFDRh8icSz5iIedjohm\/CYhT54F7\/c3108\/OZBD759A\/Yv1\/g6iKhScCmeaQz\/dTqAn0UyjngASlONX5MkDgwU8JhrvzeApeAhikL24RPw4QAsDkFQpRVyfWWXbKmIxTWEPeeE+UimE4nq5c\/rTvGThiGhlhJxQgNAYvZCFlKESaAJnWgmiydNp8rrwyMQ8un64v6ekD54SxaHopSZcBaFyoMn6A1fY8nlWci\/i6YPP5z04cMWtsqdwpCFDXxFl4xUSd6MniMni5DqfbAr4BMeoTUK8CnTJKRqNhZUhiSmywa8OVRKzFmctJi\/hvpPwuSKLKnMXjRAJZtidKFXCsntPo0EDUmQKC3mRLP5IkJrNICtUKluIZeiF\/DHx1mejCMRPCtIzecpEC8xZEZUQ6BRJF4gTHQwIzSx6rRf+0WIQMznTAaMcEUWiQxmVNFx1NTQYpIKZi7PrN8+uDGxfjWPW8PWh+5CKE0wtUcQJ1HUxz9SiewPaKZ+LpGeOhlWa0JxnseoQhwwMYG\/vn4id9nf9ZJQRcufDs9MtPHQd\/y8BhYpZknQbnGCJuSBc4Nmuali+zzWvUK8tQh1UWWp0Ugcqyk4+hiEczA62eNzpqnvvkRnkees+hIHBF2qZcJQswF4XsnZlUwxicmYUu1JVAHZSBUmktoQsJ89qXKQjSwm3hKVP9ZZLrLo\/TWeYlsaDAxreqJC2YTFnJkXqA3Yl4WtSmL8NzPl2sjWr1DU8tUiTTAvr9ijMyyIUTJNewQSPz45xBhiWcqlxDwmVEq6MjXGTUjETJXMDeOUDh4HURJiX76+\/fJwdXtD7q7\/\/Hx1Qy6v\/oAj8PKKo45t1TrOYz9V8Ah7u\/eWzG4p6jUjdLEb0JZMzpo4V4qZI0bq0fF5aQLvabdmjn5RW\/xSN2LVURUzNrJyk8Ju4hmNz8GfYJU3Wf+66MAtY91Y5JmVuv4A0FF61UJYSnqVltRMbwfzHE6Q0N94i2pWb7lHXRhvUlGknvybSIv8TvnoWGG13CY3gJ9\/+vHkxI142wJcf52OjEZbQ6cWkq693r+v2\/NsVOXYITLTyWj3Kl7lG+6BVy\/WtTvthelU5dLTuyB99\/VwOksiKjcCNRrEaIcuivJeWVbrIZIB1p2\/k4dTBs+Mj8u06uwNhbfWfG7bMH75vTrYtZhOmRwMIjGt42T0Vev1raGCREoW40SPsWLnIRd2\/Ybu0JzJkT2RkTL9wHY0d7QzLx69\/FqHWXlWmO0jeKxcx9Nc48hquigh2BR\/X+VN3lq0gLB1PgdCC\/erKDww\/9pefMrTdXL0bkIVTOjhFBtb9O7s9JifebVjqCeeMsfK3QQ3Ej61KUDwtQ8t12jQo2sznI8fy1dPTtymtSS1zFu6cXNdQXsXv9utXr5+NIZuUXzY0Kc88xatNuw6DdVeHxAcPVtjZKcZoZuNLHY2L73YCPhm4pcHd6DbcRabr4qLvXkQe21d82EsRIR5X657zq6FlrevG5Zv26ayTYo84KC0wQIVnrY2i0vt1STba2kkGQ1XMKfymYXANcToVgcAJkKabfcwVwbllYj7Lppkh8GMBc8Do7nxHQYN3Nw+gJ4xwPqW0AhoomdC9lEWF3PJwKE4al7c4TcTQGUxzFaHHoxGmC7WHWrmNfe\/lBHjK59nit5jZ2zfFgBNUjGv37J+QqOOpyNOhnwwGm0q0zVdHOeYhlbFXLe4aKMn1511539QSwMEFAAAAAgAe2NVXJwzGk\/QBgAARCAAABwAHABpbmNsdWRlcy9jbGFzcy13YXRjaGxpc3QucGhwVVQJAAOqiJlpByGoaXV4CwABBOgDAAAE6AMAAO1ZbU\/bSBD+zq+YRiA7VWLIG9A0CaLAqdxRqCBVVSFkOfaGbHFsn3ed0Cv895td27Ed2xAoPd3pakWOvZ6dmX3mZWd3e3vexFtzjClhnmES+MN2bzh1nbdraxYZU4dYKij77y4+7g\/fK1CFuzsgt5TjZ9M2GIPPBjcnNmUcvq+tAV5eMLKpCYwbHP\/GgWMKdkAdytVqF2YutZAUosuwLN2QFChm7unGV+NWv4l00Ll7fW0TfS5kKDW4BF0\/ONm\/uND1GiiSNEMBV1B9uyJrRrhu2MTnxXyTzyHTEq6ua7rTKfFNonu+awUm1\/kkmI4cg9osx9knjkV8fUIMn+vUdB1kXoPOavxHZOz6RGcT19NtF2+Uk6nOKbdJmSDDNyd0RpYFNlaUyKgjsI0HxoLp1PC\/lQmTJtBHAeeRmFYntsb9g56B8lV0Dw7rAUM+1KqFb7Fc0bA3tl1DtlFUTBoG+uAEtg3oUyPXtVM+dW27I8OG9blnjVLjpGNQgRF73O1SFqqLA1RTYlMi0dOrKZaL\/lLkq34\/q8oyqbh8wgPfAVUoVw2VqQ8CzzI4UXPE4opIPB\/D7hY0UBa+Oo9jTKkV9rwEJaWNAv1BVr2r0m7R0MMuCxyUBIeY2QKXcl4bY+WhrxY6jrjDVY4kFbTius+8RThyPyAJ2X1i1kKcqYNj4Vmcn47vZU7TBDBxpUHLk6ZBXEKxkLrcgAXkpk\/QkTBwecj8eiodC5Qv9Wndgvdd2mWYrrM9l6yTtkpN2k\/cWdpCKwWwT6bujDwSw6vHaaFBLWKT5cB5hkFfwONLfHklpDJ552fCdY3T18zw1RRGnuEv4Ve5ODo5OhjCwdmn06H6ugq\/nZ99gO8ZWO\/zmMLn90fnRxBpjml4w4L900NIKS\/aKlnYigMlNeIEydWwFEOUPBeKFUJq0ykVc0VnS0Bq+L7xbWVMU2D6hAU2Z6sBOtde18DTPJfxcIIGgy3gEaVWNp5XhH2e7fX72fFp0gtFsXvw4OwUBR8f4oDnWgG28grtN9fyFgxVFkgHDJsVCT2bKNn+Z+eHR+fw7guySNIQHB5dHGTpTo4\/HA9X9gRpqOc4gUSI+EwtiqF\/xuCvnxY6j0TKj8WEnDGwWBsx06ejIlxqEFVTZuBj8cZ1OdX8+9Aq8tol6KLEk5Q6xxdwejaE008nJ7lvA+wxLgd76UMGnKcaIlfpFyx9YnAjDZLiRhaarxYf0HzI3jGJO4aPkbbDbx7JVZ2hWQqLpPVFTMdcQ7sZgRmuhuRntZpTgjq6dAo1ZiGqf0UsF2Zi2aF4BkaznA4ZBqEV2MSSxb8o1wpq6IdUTE2OqCe+yTxh4wIPEwxFBGGvqHwXw4htFWUWtVpbGqdoQ2W6MDZslqoj15E9DjHwbXzpi\/EWip2LJVdEGEr0iD81bOrcRHwVJRUf6DIOH2edX+mFSyOQy+Z+JXb3uvQR2GAVwArOqMdqU6tfwdQQNjoumh\/fYyKpTPhu+BTfjRGxw3c538jHQa5q7LHZNcwomb9zb\/uVLdiCZht\/FZhTi0\/6FfE4IfR6wuXzoOcZfAKoyIdGE5oNrdWx6w2t3cFbq3nQ0dq4lNRa29CERlNr7uL\/rtbBO35pQlvcWrCDLS2zoe20UVxLaze03QZ+QzJt681Bo4V3bMa2Rlvb2cYOjW3RAxpvtM4u\/jcjdk3J3BQ8dnbryAi2td3tOrZ1oNHQOu2TWMe\/KpuD3iYONQtAbzM0wGCpJsz43V5SRIaGqdcjX5c2zvYkzMSJj4sqq8DZymjRl8JZU5dWVZfLVrHJUto55a8lNLou9mssC7iLzj5zfcqJ2IlIxmUFKKUeRX5ujfB8Pk9dNJRsUfzKlI+q+B\/NlMWSXiJ75mI29KoXy6pPT6WN3SSV4vOvVPq\/SKXPSoHpjdNfye8xFWOBBdnn+Sn0x5Llo7nLorNc4pKSMC+U5LXQKfQRdyCiWDWXDTbYIj57myh65SiVjf+KKE2rmEu9e5L3hE9tGaCfI7rVAjO+ugVMYDihDPajTi8X57mDqoIox6gwb8IjKlwOE5\/4eZxQI4mgknG5eDtFPPeL3TY1i2fWz5QxwtGY+sezi+Fleg\/0CsRkbowYunMpQRe2lo9XXiXq3N2lklN4opINT\/QLhhlQ\/8pwhMT3XTHkY2eGxYKFsftnQBjXlPThwHIa+IHDnLBrvHNd0uttub4sME3CmCrSXCxd7hzLsil7EHkPRLQVKSDPvl5QusynWeGrOujixPOneefT3POF\/DPFOn10mGOdnL6EvFW5R1YtoXii62NDRn6vjxXci8bDY+5UWzqwTJiUOtbDR4pJ6rtf+xtQSwMEFAAAAAgAkGNVXICf+WtdAwAAzgoAAB0AHABpbmNsdWRlcy9jbGFzcy1teS1hY2NvdW50LnBocFVUCQADz4iZaQchqGl1eAsAAQToAwAABOgDAADFVt9v0zAQfu9fcUiV0krrxgsvKx0qY4KJQSs6tIeqslznupmldrAdSmH73zknaX60aQcIibw0db77vvPnu0tevorv4pbiS7QxFwjvI33vpFb9VivEhVQYdiAYvp6Mh9fvAujCwwPgd+nosYi4tfBhzYZC6EQ5+NlqAV1xMo+kAOu4o59FooTnA6mk63RP4ZuWIUEhv3gYsoWMHBrSWWkt9HKJRiDjGStbokqYdLi0wRFMgbHzq+FkwtgRBD628hhm0O3XiHkqTcRefCfc4K20JMxQhbGWyh2kaMqNJ+nTXpwYccct2oKqQUyFJFUg\/1ZqxZ24iyjvJ6UKZEXq8eAR7Rqy58AMrgx5XuAo5x0rKK2LMfs0Gl3Dg78bD99eTLa3fICoTP8Q0eEN1QukA+30F2hT3Bi+ruyqrXAFA5jOyvwW2iAXd1CEcQvte1zD4AzaEZ9jRO1QMmxYphloRmwZql+DyAURBtrQCVENDAaDDL7NVLA1GOupGfNtmT2CccXz4D5v4F6YkIG9PDyoOt8sUBo+g43CjV\/DEHKlPxF4bO3eGXSJUanu79VjvWcaqrGdWELQ0gBu0TGRGApyLF\/tVHJKjX9WBmw7nuXWr2Rd3J6cwGeLcKP1ed6WkB4gDMeXvkzg3Xg0AWrZmPKfy0i6NXSUhlAaFA4cn0cIXxM0Em33uMxdJNZp4mNZOdAeVoL5bWT\/OzCtZRgUeBkGaRXmezmqw7yNCRVXehFsShNF9Hx6EToM\/RnS\/9hogdZKdUvzYYshkkual1AwvHi+BUgTnK+DDSAIucOgCVRhCd5cTM4roHQqlW4UJuxpwm23fDtmx7B9lJWgFNA786ZmM6Cbxvn75p5bGP0DlW9ej8kil+g4NQPbVD7LQCw2UmBjZ22KLWdrUvKX0MpJleAuweNuZtm2p777O3r+hSqru1UgdefTKinMrzlBjXF0MJK2zvw3QeAjSyP80t7QuimZaLa2J8Dyb1R9lsUiq7W61o7pBdw3IL32YF8iVNkhDaVi\/0\/wVuENlLP9Y62cLUpESUgfT1ej99eXo49sfPX57eVH9ubyExxDQNpxRA1iT5br\/H1+sjPWj+k7LPiDqViM6\/81FdtFBiRzs7k\/PfWKKV2ZYYW\/\/09cK6hrrj22fgFQSwMEFAAAAAgAgWNVXJiYunEmAgAAlgYAABkAHABpbmNsdWRlcy9jbGFzcy1lbWFpbHMucGhwVVQJAAOxiJlpByGoaXV4CwABBOgDAAAE6AMAALVT227aQBB991fMA5KNBKFV30JLRWnUoqAkKqnykEarxTuYFWbt7q5DogapH9Ev7Jd01jZgQ9SStJ0HLjszZ86Zy+u36Sz1FF+gSXmIcBoncysT1fU8gVOpUATg99+NL\/qXH31owsMD4J205A5jbgycLLiMDXzzPCBLs0ksQzCWW\/qaZip0WCCVtEHzGG4TKSgUSuNCsKmMLWqqsUySMFksUIfI0IGyvAAavwXXwNhg1B+PGWuBrzGShpKKMOPDDTS7NVCelyXQeamGOUaZYeGMqwjFHuRuBGG24OWLFrxaQ69+K3CHUgCN4geQaK41v6+o7nSAOotao4A44QJ+fv8BVwOWdxL4LX3ySYwwQ42bJI1fM6mRJcrNaHR+ejk8P2MXo88fhmfs\/fATHIEvVRhnAk0nb1w7Z9DOhygdSXNEk\/a73gaz5Hjtr2deUGD9LBfFxkks\/BsX+QYULmHfG1T6\/ie0k7uUBDjAx9BK7yGAI24sG9CYQizY1QArXgdWaaDNtFqDHjLT3Z0IaI0tNFKdCCLNpGhRipYqggaVL2O3b9Se8g32N7\/hWKAm5l+uBkGz3Sv+PyKfQsrgdi9Cu16wqjSzlDacQVDlQZe6reYs5AbBN26kxzWHMzmlbEnHZoNDt6K5V+Fpa9XuUZ+iyJ1+paXVQ17bau9lopHPKw3Y6sNyyf5O4nZVn69yg\/F\/hKY8M8\/WWb+gp2us5f8DffWAlbfyfgFQSwMEFAAAAAgAZH9kXGZJ7ETREQAAk1MAABgAHABpbmNsdWRlcy9jbGFzcy1hZG1pbi5waHBVVAkAA6w6qGnQOqhpdXgLAAEE6AMAAAToAwAA7Txdb9zIke\/+Fe1ZxTPCjUYf6\/V6JY0Er72X9a3j9a1kBIFtED1kzwxtDsmQTcnKroC85AcEyFPugEXyeq93fyi\/ID\/hqrqbZHezyRmO7TwEEQyMSVZXV9d3Vxd5ep4u0zsxXbE8pT4j30XJOx4m8cmdOwGbhzELRmT46OuLF48uvx2SXfLTT4S9Dzk89iOa5+RRsApj8uOdOwT+0mIWhT7JOeXwMy9iH1GRMA65l2ZJUPjcWybJu3y0e0yukjCAgUT90SDw5mHEWQYTXieJn6xWLPNZNTCgnHqczvLhmLwinvf42aOLC88bk6ENMSRvyO6JgZkKSrowpzRm0RrcAqYHdp\/leTXLinHaQJ\/TK2ZC9KQ9SfFh7i1YzDIaGWtqzrZMritIYJQ3TzKP36Ssc9bUo2\/pe++d0gzvbZGDeJk3KzhP4sYkAtiC2QZ9wCLGWTd6BSPRu\/HjBTLWmyXvWVO++DhKFgIEIDRKbzt1OmOLMAdlhYFx0aLO+Ah0ZsFG1W388zwgq7Qz8qgQCJGyYcmDvaDg\/nKPykdgduN2BD3GDVc0Bmo8TY+GFkSFiVZkGQAm8zIWB8CCgObLWUKzALhn4cNHoQ949vwlzfgezRi1UH7xoLq0hZgXsxYeriVU8Ghb3m4x7h\/B20\/GpwvGeRgvevNpi3F9+JRX6NfzqYI12YQ\/3YZsB48R2cEgA6GuNmZx51VFmFcu7g2Zklcm8RGdYYiAv+mZZNIT5Edp5n04xWm2YHwoUTUmVx7eHCJicjn7K+Xww7knZqrIblhpmoVJFvKbIQ47PKyfvqmddsZ4kcWSFZvwtTXWOJzl\/j65AHDySwlOAJwAODHIJhBLyDIMGE4VB2AS5NePQXyhD3In85BFQT6pUDJ\/mZDhae5nYcrP3v5nwbKbUUncaGf3R4MDO6PBpJFnkIlG\/mB3Apb2GPk7GjjZOtAinML5mSsq98d0RTOSswiUDXEqXHvISxuy4j5PFouI\/dp\/IdkzstZbYg1zqZ1TxD+5otFol0ynUzIw6TlpDG5bHJl4EBmLiGYeSoZ5Qi5j0gac04htBKkBwg2WS\/AcmCmXOrqr1mJx5Na4wlWC+AcQjOIFG4xtPlmDG1ysH9\/unpzuK+0a9vYzIpF0GMIiSmag\/ztpkvN6rp1yLMBO5cO9s6dPtCCwA7NlXPIHLqcEHIeHcCKvGekYwAHVuZY2DDwTzwqm52k7GctZdqX4vjlWY5gLb1BkVDBF\/G2MtxzmQilXwsMV64WyHtaClBd5eTktnbj3TbyAndHxMU4iYYwZHITF4N0kDrZK+c3IIFgP58pvBeEVCYPpwOn1B0T4+elAqBHRtwXldkA+AW8ZsHiAClpNAPl2nMSlvY20wFIuAPckepyqHohxQ4NcxSJPhL28GQ5zf8mCImKQvogo9veff\/4LuahuWnEIk3aYW3JKQv+VPJI37ZBFi1xgrUD\/9L\/kGc05eQy23Uwq1G4MrHhYwv8feVHftMDzJFLIJfq\/\/fcfyAXes+DY+zTMFB0C7s\/\/Q75R92yUPElTDfTvP\/\/XH8mFuukMuZouKIFXu70sKdJB6Xg02LSEhPC52hMiHpydCumcDcmEsNz3lnwVyfRNyK4zJYEhw9N9Nb4xWw5qVk5YZ20C696MBuBhxaQjS01eVZb1hpyfVxdqMkRqaGw4BwwhmECW0ZsKF27kSoUZ1\/rwpjRjI4ETquoXGSSLvPJmtjX7NPIhcnHluFpNWiBDw\/UiNudSRZyuQcBkbEXDGKNHFz7JUPITaQjpsaSaYAxix2uFRU5zniXxQjAebP1dDrESHeGIXPvVwkxW7FasV0M3pe0SvdczYEJPukokI7JYYTQHVN8eh8eoihpjO8i6tTVxPz073QdDMRSnj\/3oThTYxtl7EFOcFsA3y6WFlWOo\/tCcW4Jq2+5AH1saY6akTCA\/7bVREBWcBkVxsZqxrLFFKMARrTzKeRZCRs3yYblX4CyVvvFgcnCI86\/CWLvR2DVAuliwxmL0VMQuBqDceZgOjQForg5AzKzEak02XS4ZhLXFkoGnl9rL4U65RRBz54TyyYb8MwtHO3FSJi9apDazIFECHc2jhPJd+9nplBzoodbUKYh6\/rtZ8r5bo0xdqgnqVKWSO88T8kMJvrn+GIJEEWpsOCfDG9SRY9CnxKbBkFNJw6MogmRHySYhQZak+Ps7liUTAgSCVoWrYiUhtpPTRzRWK1fd2FwVm\/8ZDNaUNoraVOtPYMW\/0nXAsODrMIpKnZmQX8HayYyRCLI0AKPKwvvpjiDmOqOQaGVeXSFxrL1Cpu7JBEql0cIG3BBDS1HLizI4qcBk3W6vTeDW3J9NcZPtcgWD3fEcH07c1Ax2T\/yZsc2tcO\/+OK\/2y3wZ5hPhk1iwexLOR8YNc25DH2DPjZWCwWAXNsHWPvhjxF7YpDO\/w5RNA643hS22W9fhqt3jxlqjaJYW1yiCDGuCVDkUCSclRZNJHw0VCD9\/cHAwrBEekmVSZH2RfHlkIDkSSPrUaAWWw\/v3EU2J5f52WI4ePtSxPNwOy\/3Pj3Qsh1su6eEDY0lHak1kdEgCetPHg0sOfXmEi6v5DEj6M+iLr440JJ9vhUTwp0byxVZIHhzc15fz5VZIDo8OvnqgYTm8\/wFc0dhy0BdNa+xDr19a6GZu+2P4tHW5n2sHESfXLU7N3DOEME0QwjYqutki66tTdqxRtaV7b1xFKkexgWiLUFUeT1UhmgFQrAYL\/dNBc9jAUa9Qj4hY9zZ1i52KKLF6rKZqdbjzejv6m73VXvD6EnalMM0ojDHX1yt2yKDmgkQOSjC7mw4QEcLuRYlPo4Go5jlWSbD1wv1EkDgdlGzABHDUWIFY6YDsr6nOaLmYg7EvLx8TpHUCm3kKqZDY+RAaB0ToLRk0FG2AKb3MxXDbBYO6Y51Z2rENLXXdtK1PlIHKwkWRYy5H8YDfcaAI8927t2nJaGxUKdvrR2usn1RrV80JeznzFb9d9ZTT5X1g4E3EsIwbBGG8OD4gh0fp+xM\/iZLs+DP\/wdHDo4cnDnH9h5yAfF02YKzj+\/J+Cw3OcqEb1G2sPEkhOaS5U61+EA+2sVNtXtzcYdeAbUDazE0b0h9myTUs8GhA0oj6bJlEActMqxLEfhNzlhE5SBw+inotiGVfNJngGSMmyOVGZV1yJ8zy7HS\/JL9ldabqf4Bkmtx\/nvBwfkMgKY1Ydw65Xgi6YytDme3SYjEfZu8wX1Mm1mPl3CDYDIjacyjULEB3RtyEbO7TLhi4L6y9RkRMHfpUnYyK\/aakA7abfCmupeC3cWKfRJr34lmennQLRfZWKanIi4FxaFR5ohmPqzMjNUr+7AW4QQRx4LHSXnmyjDisqKNXrmXEESNkl9V0gLbiXpB14AD7+ku0ok3aIdwsloSfEcmhD+WMbCD79AyS8wxKjz+j\/juMGnFQ+flZkoFj2jOdv7qaz+cnG7D3iZiEvGAZxESIkmvywU7+9lRwu8Rxa8Xt+vQL2wvqEx\/riEa53x7Ht5Wjd5zfCpSzG\/HbD+XspgVdny2ABt\/zWA6s5KPETumqjAOXksW6M3OIVQgNeWeLSPAUsy\/FUZGIzSDHwp3MWA5ptotsywbQGPJ1txZ3cGENJ8QqzuXv3lkQ5pAg3HgYtzC7\/wyhJQc6OXXb0xwcEGsaqewWYTwM5bINRLibRheJEN5dEuY547BO78X3F5da95p5nP9GnmjcxcPCK5ZhjBYP1g90tQiI3gFH8iy7x9r9w11XZg+bjapvHHWrWnEf9KWdg75e+55wAvLGSEN4YlNTjQLWDK3uubvowcpQcCYOekVbWy+q7IYdS1ju00SU1TkRZ09Ygd0A+hgPpKpJtWp396TasdMbuZmSZQHhvDuhO7qHzGL7AdA2aqfAPJdZv\/AmPCy9s+modeqqoixnpbMc7G0t4LFx9Cf9py5kPBvcQENsPdR4BlKweHo2Nefoib5myYbEVf8t0kD0SejhVNpSR3uZSepJX2R2V5l9LtsbodZOVnNCL3Pt75cdprBfuIn9DScwGiC3Xnfb6FqhS4+pkql17Wktvk6rkpgIRbVE9EGN6z6nsZbJtZdKlOYgA2FTvQpjGnU4Qaw7rnWAWAzdwBVpwC3WiLPZ9PZS57JZEH7Q559sgwn2phaefzN1UMcpE+iyN05EH0v0riRt8zWpHrByAkf69ixZwCbo+DhKFgaaqpZmNH2IvNAI52HQ5FTti24Ji3JmbwXKmlynaigY5alzGoc8\/B2TDQGqv3HNKLOOW7H7bt2nWdLRVHNBJ8oPVr9KsYmaZzwRAtXGYfPTy8vHTsZKxaxRuGboJ8xaQXW0zZl7YNWUVcPZobAWJ7s9TJ8Wvu1YovRbK\/K20HvbuHvbprIb5O2O9+AcHd+i5CXfgMvYnGXi9ce66xffrkTiHa237XmzuyJuM1OctINo3+Yo4yxLcOaXMS34MsnAikw+OTJqjCbEkUnVj1syKAvAzFHV\/lT9NZCrzf4GBq9Bmka+Y5Qim1MYj9uDjgXWlIzOJ3xttmonUxvwjQTyQu1Dnj4R5zFqMM2wYvnbAmPypFVOkCAVEXckBqLGofYzViXE6bvHNdWNqKomsRcjH5qcdpkzPJofHxtwFkVqaj3z6HzHw2BjXvjY4V2\/00cUEotrrhDklMdjGgOxAkvVsxTCP56XligcAbOloslmE38h64X\/8hf\/8hf\/QH\/RVSlxdq5\/zGKJczXirAD+oclRYrxJWb5Q1bqcT+n0uv1aH58mDb3ddnhGc8hbUCapJy5UN78lEovAcphNmpXJ6yXwkpIxOdgwhV\/jaRVCoYer5Ar+h2dvSNi2zvffaRhJNBK30Tnaog8aQ2F7cgWuueF5LUnJ6qrGGkjr8fi3Elp5LQ93HAXYD7ekPqVE6YHly4HVIUf5dpe4kBCihNrykppUZEJaqvr1FA6a1WBRRFYXe2cCgzx+7bUWabOy2WCqmYfwpIrh57L7qVbYjtOBYwlbpg6bnYft5MXsLbZyEsmSHDQn5nPHZxx+kxRZpYGDX+QDsqQ5mTEWk1\/0aVczXSSeQYxsCJ011ROdaNiZ5RDHu+gdfAviSYC08ev4dWwQ\/xqof22QT2Y38qg8BJsRmUUImk95kk1wtDyhOgZAvHo6JzdJAcOvGPltAXtEPBQbkzQCKEb8JOZAv0C3otk7xkUzBsmLNE0yrvAtaBYgZcDGHpwrNU4\/wPkg5lqPlNUbNxHPDHxoGM8T0AJECYTpUqn+D44MrWDkMo1xpWnjWnwbfbXA+mxJ6wdI5HdPWr4JUb1UCpg6Pp+BQaOHKjs\/z2B+YqX5bqY84jFvx0m2olGjBTK5Htrqv+5TLTYJqlbQ13Or9667\/HYY48cJfJbMicrEvEvId9qaydLmsedGKc\/6A9HGOWWX1wXWYP24TA5w2XWpD5c8Jp8fNLOMMkMVw1sb5hxrfJ5UboddQYqRkwinDsgN++iLK9vI6Cxi5fHzdRiwOeUikENUGJydgmOiAfxkjk5Evmyu4Anl3a9YSUJx6Eb4vkE2fEyEL9TxwUdD+DLfqIvMiW8f+IqPJI9nSXBjdHbOE\/CxoOalKkEIwv8020NU3wE+VG4UjPfcmbEYIJgGxEUUuRsMs7bOw8DuGBBIfSAW0g6P8mrNQTuGUz8JmBOP0PwShYDqxqTepBZj5YcwKPckkvP2N31d4Ltyi\/u33\/9puMkS+rRNjGzh1POsm2nfFISjZUJqDvyiLW\/WPGF\/RckRKMPYj4qAke+eff\/d5dPvn3svnr385dPn3pOnPyDFIvHZvwrZdb5foZmky7TP\/OXXiVzTz5vH4HX1Wo3TejXu3dugU8Mep7dqiH6S+nNJAuPWRaGdElHj0w\/4N0Q3W0S8Pmol4lUHu8DTABPfBRCv6zhfDxEnBQZSJ1oLTCA9fOhGOc8Yw8JQuGJJwVtRWmAC5YMWKjM8n4jCVcjrVyUdKDUwhc695iSKvBCblK9oNGzFZoIJhEdufNW3L+pFu\/A1wQTSr5qLfmOatTqgkf1xepGy\/qyXpj5r++wkOozVjoSi\/BCZaJYKNkshupq0dLXG6NK5iFfGy0M93EmJw\/Amt3f+H1BLAwQUAAAACACOY1Vch7zowZoEAADkHAAAJAAcAGluY2x1ZGVzL2NsYXNzLWVtYWlsLWRlZmluaXRpb25zLnBocFVUCQADy4iZaQchqGl1eAsAAQToAwAABOgDAADtWN1u2zYUvvdTnAABJAN1e5\/MGbK2W4MEbdB0CIY0EGiJjrjKkkBSSYvUwB5iT7gn2TkU9UNLju3U6dAsukhC6fzz4zlf+NPPeZwPUjbjKmchh+Mk+6RFlu4PBhGfipRHPniHv5ydHn5448EQvn4F\/llo\/BwmTCl4PWMiCQ6LkJSCsyyJ8LvmaaTg4\/nLwHyG28EA8MmLSSJCmBapkYYgCLNUaYnK\/hCFwD67OhZqdCAiaD9j8D7Z4AJm\/Sn05+0vKmqhE95WDAJKotQBitF71hgbRYUO45E1iTl27EVchVLkRruxd8ZTDTqDa0w2k8DSCCbFFy7hJuYpLsFaBKH5DIQCCvb5Zp5jziKRXi3J5IgMUzo7m1lVxeRPHuoFqxe3CiMNTPHml1A5oaj34DaXWYRvAkLKfDN3GGWeMDQ9YYqTu+OTd8cfjt69DU5Pfv\/t6G3w6ug9PAevklMvera0shHrWWKwwAlZ6oX1OzLFRSjfoYo\/RdpSNes1DISF0tmMy8DooQFELN8f1GI5kwiFvT0HzqWVeT\/wtRRXV1z6IBBCu1VpEe\/DPbjO8HfrLNiv6PYmDK64DuwL31VsohZT8GGnUWyfLHok14VMG\/l5k8kuFQEdCGwEY\/CnScb0EIzTTOlgxjVz3CIMgvpMNroIDyqRA4XylFCoZBnzbtmdCp5QmzELVug4k2hiSXq75pAZQ11La0Sos1Z4i1uNkAh5jGJcqgtvAfSX6K8yPTogn\/Te7wJ+wUpTGLIB5U6ate9U3InHdpWxya1QmPHkC5ZIUOtqFXNx3yu9xU23kUkeilxQ4xpXoqMDY91ge79PJ6ubxRguHAF6PFsQzwgc1AV61pVsAcRINuseYZkl3LMLFPbKYD1X8rI3YIWifsei\/UjlrKvgD7ueW3K2T66QwkOvV9uiTo5wWCHFtGZhPENzKOkIDvsPbDlx+lFSH5QOSEqtdTBiJH8QiJhYnxAChJDyZ+\/waUVkpqmPQwenFtGMBg\/lkKhGjjN9\/b6KOhJuAhd24JY7SuLYlCOmWfOiRtClq+ot7GYfoagF7h657azN4N9u2sbkf5z3vJ+Tv\/6cC8m\/Ky3npctNmbmN9AHIuaHkOuZC1qy8jFHBjUC+UWhgoFjCt8LP\/8gKWfPnN0zdL7GNWLqt+A9A1G2k38TVXRuPkYg3DO8b2bI9AAZAm1HJnaVk8q7AN+SZW+XdtpmOqfXWnKNFOIgNdE5ZhwqsQwNWU4DV43\/16F859tcfeU+D\/vEO+hOGjeBlzFL8H\/I7DPmE3IXG3aYDniKFMtJtDvkbhup4fjo3b7HQCrca+841h\/KfbJ\/ChzL84VamfSsp+Oevv+HU+DnP0o+ehlcyy+HXQiL3kA9xS3fSZLM4+4FpSLIbjgIm9Q3dPygZoE0YlWHfiwis1P8f3dlZfN\/32s5R77u5e5gJ7bbB9g0B3HFJ4LnRGkHnVSPuzPq6Q4zhnP5MhMLNp0CrL0u3ZppJjqOXrk1qK0jpq0X3FoVozhKyZXUsFXL9tGFgTCwapocGm0gJye23LTS0au1wMLK48hrn6VrkiS09Rrb0L1BLAwQKAAAAAAAIBUtcAAAAAAAAAAAAAAAAEQAcAGluY2x1ZGVzLy5naXRrZWVwVVQJAAPPs4tpsSKoaXV4CwABBOgDAAAE6AMAAFBLAwQUAAAACABPkEtcyhjAcw4CAACHBAAAFwAcAGluY2x1ZGVzL2NsYXNzLWNyb24ucGhwVVQJAAMWqIxpByGoaXV4CwABBOgDAAAE6AMAAIVTYW\/aMBD9nl9xQq2SaFnEvsLYRCGo2dowAdI0TVVkYgcsTGzFCW1F+e87J0ATwTZ\/ieN7792d7\/nzV7VWVka2TCuSMPgu5KbgMutbFmUpzxh1wB7ezX8MF\/c2uPD2BuyFFxhOBNEaRrnMYG9ZgEuVS8ET0AUp8JOWWWKUIFmzZBOTsvrTjtuDneQUSXBcKyGXRMDNs6LLvnU+vjFCpWYaBvAbbI06tBSM2h7YBMV2zOwUQUh1pnKZMK15trLhqf8usyRFsja7AXzqdhsBmaaaFVWg28hLZaO2CojKFMuPOTW1VHV+\/LJiRZxI4bSgFbyOq5wpkrPLuFmdefAQjBYwDueLMMKN2vpKapPiKh4ms+kj7E\/SiNyyghyQdh0eRlEwg2\/TMGqRNDJgGoHywzF28r+kP++DWWBQJlm8Ya\/IsePN0SJxPR\/7OhdgGI3P3B0RJcOqwOmAD3yrhKQMneXh4Eiek9c45UI40PUgkWVWOI3puzjbW23M5yK34\/4zX91QzTXVVp7U678UOZ2N8ZruftUXMpyPrsMewsdwAbcUppPJPDC7jncV6ft+3c2W5SvWaMJDB9dG9M6+e4LLVtonbsOVZqUyZwS97LQtSXTzH29pf6E7rF9fHGQrfNO9XutNOuDwrHDbIv2WxqFdyKmFD4NjV+\/oAzyvuWBY42mQzVJdGAxOnFOOg3Ww\/gBQSwMEFAAAAAgAKnFkXCRxwhz7AwAA3gsAABwAHABpbmNsdWRlcy9jbGFzcy1pbnN0YWxsZXIucGhwVVQJAAPvIKhpByGoaXV4CwABBOgDAAAE6AMAAL1W227bOBB991fMFgEkAW7ipBd0m20XTqNijcZO6tiLLYqAoEXaJkJLKknZybb59w6tG2U7FxSL5YtlDc\/hXI4488ef6TxtxXTBdUojDp9kcm1EEh+3WoxPRcyZD1735PKiO\/rLgwB+\/AB+IwyaI0m1hl6sDZWSK\/jeagGuKME3cHpC\/g6Hl73zAbyDw+PclGYTKSJAgMGfaRZH9iSg+LOkhvsBckCxNJfTt28jxdFADJ1Irv3geMOsuSHoJc2kIUlqyXZtiuacZZKTSCWxa85SZslzIEZ5XYRO2IQsudL46LULEiceh2EqMz0niq+UQCKVOU7ePRgy4zuDXqUkkpwqUvrMyDxJrl3f0BBdE5qtebQHG8epNenWeRt5dI6cyWRCJeytUjYpymTXXjSnCtOL1Vubnr+fYa6LlyRKpFz77iL0N0lkMkPEsw\/DsDsKYdQ9OQuh9xEG5yMI\/+ldji7he0GXKlTXzV0VVxHRmsGvSO0SDCZiJmLjH3UCyGItZqjKNedgfHYG3fHonPQGeGY\/HIzaDWyqEobE5BGOJogveWxgSZUN13+FgN37MNkRJ9SQHMB4JBZU+oed9lEAp+HH7vhsFyzTXN3n0P0oxg0VUoPhN+aBbXmhGXoFVtxGLHidqRL2YTwcYqrIqNcPL0fd\/kWT42LY63eHX+BT+AV8wYKm1b4t05oH7tdZbufJ2wEpo\/aLhx1bHN\/9+jmo9gWVKo+fbQpvRU00l0KbX5Rfjf\/vxPdQoe9T1C\/ItZAhXsFP12CcGDEVSGlEfGvPOQy2ZdL5v6U1HvQ+j8NaLkU6Ks20nQQ9oEqrMmfjY\/pR\/FsmFPaBGNtf0elgH7xV+pyyhYgPRBzJjHF9kKUzRRnfx47p1U2ATU65NNSvb8DgPmOtsqdd2zv7m3N57xVGjar\/2siHV8JYpqgFegDv3sOb1y87nTbaDw7g6CXMk0zpJi6lmGwXtcYdvlmjcuALwKxkhm8gp4rzf7HHoC6SzJTI1x0HedjZDVW2OUmxEDmsghZIC7VV4hojTXHUyEk2HMeeRFDKXC2p9EqOo5LCcmiOwwnbDFglEddaxLPKdcT93nD71ZbbV46AxBR8+A1sg9yeJbCE+I3NbKcGt3R23TuAVKC2U2JHVXdPEk9z7nHOxpCGfIYyxFRGmTbJotoMWHk8uZzJLI8\/4dNEcbiQGV5JkI99MqFMB\/sVJWWMTIVERozDHliNMDaIyif7HZTvt9JRm7562EbULcmz7l1tyXtdubrYuVi2dzChU0lvc+17oeWEfs7Z3H113PiruMlU7DjkpB6C7dLj3BZjX67Htgcntq3AEV4Va90\/fbBS9IM2NBPRfnwQdOVx1\/oJUEsDBBQAAAAIAGqQS1y8aUIniQIAADcGAAAZABwAaW5jbHVkZXMvY2xhc3MtbG9nZ2VyLnBocFVUCQADSKiMaQchqGl1eAsAAQToAwAABOgDAACNVF1v2jAUfc+vuEWgJBNd97IXGEP9yFQ0Wiagm6qpitzYBK8mSW2HFlH++25MPkXX1S9Jru+5OT73XH8ZJsvEisiKqYQEDL6L+EHzOOpbFmULHjHqgH16NvtxOr+0wYWXF2DPXON2IIhSMI7DkEnYWhbgStJ7wQNQmmh8LNIoyGqBiEMHeKShnciYpoH2Oe1iluRRCG22ZpHuwnAhYmJSOPIYQJQKgVEDSxWTiCmjREqygTZlmnChMPz7DtwerGPM2Rom2QpFfE8EtJ8Set+3ynAB8\/8o5DaAI2CrRG+cqp4LQ3hKzL7PoiCmrLHZMyz6VcEofoJyDSBcUaIRYt8er44pXPZ4T6F2NQonJ3CWckFhTUTKVH4eElFIBHZhGQvKpALFEiKxlNiAjmGJ+4LB9c14rACFTJgUm48VCyOcnywNh4whDAaDQs8h2BnQRvJ2Z2HXyBttDaoBKyRvAGkdWMiI2DqwoW4Drex6F9QjAqA1up550zmMrucT2JpWHX9NJFrvefeQe9EnqfGRjz4q8cVy6pbKrbRXgmg\/\/87P0oWcWxcCyVBXijnuQcWfp+MbbwZOBwEdzN2Wyu6yj1wv815JsMty3Vb9gESGxppN1+\/tDneVkHwBzl6\/o6pfbs3HZTV0eZFQwXf\/KlR08I1Seco7ijW6+kbFet5rZWupODV1ufatf0yZzEaxNAJOQDZ96JZuLqmbjdK+6luXTsi0\/\/rFYwKCr7hGGp8\/ZTfHfgD\/e3VIplMZFeyyP0imUqGV09Sjyf7AYa2ZN\/bO5\/ABvk0nV++xPfy69KYeVKdA5h0Kk+mFN4Wz25qf4cKbncN4dDWaY0are\/DzuhSHm0aWRrgakFL2nfUXUEsDBBQAAAAIACZxZFwYxSDNmgUAABoWAAAfABwAaW5jbHVkZXMvY2xhc3MtY2FydC1oYW5kbGVyLnBocFVUCQAD6CCoaQchqGl1eAsAAQToAwAABOgDAADFWNtu4zYQfc9XzC6clQzYuWyBPiSxgzRYYIH2IWgCFIsgEBiJttnIpJakkni7+Ymi7\/3FfkKH1F2ivHKLtHpJbA7neubMWGfnySrZ42RNVUJCCj\/G4kEzwU\/39iK6YJxGPngXP1xfXdx89GAMX78CfWYaj8OYKAWXROrgI+FRTCX8trcH+CTpfcxCUJpo\/LNIeWg0AuNM++MTeBQsQlHIHxJFwYLFmkq09CREKNZrKkMamAMtgtBYeCQxi4hR403gFoLg8qeL6+sgmICXHzXkPbibwPHRBL6D8ekwS9YM03QdoDLSseIQ6bVBbLwtG\/d0ISRFHXGYxsZdLTSJVceQojpYSPGF8iCRLKSlmeNBoVQ+mpp2tLeOd0vT55RwzfQmYDxJdUDksut+LMKHUrDU\/35H30sFbfURU0lMNoExQ6OuoTKQl61QdGHGh3shYhjZswmiVcMokSJKQ3Sq+KIwCIhjK17huBCGGTyFwRLLmH\/h1\/UY\/8orbAE+vKluMo6O8pCKBVzlN242CcW2q8yYR1KdSp67WiX2pdJ8eAg\/088pkxRisWQcEHxA0iz6JJXhiiiqDtqeMBWkikpM73KJ6WXcH3eMY3Ama1xgRqmP1cEqfhIprFOl4d7aw7sYC2hRmiptm\/KqA6yr95AzzTRKdbia5gLIMXhGpRTSq4OmFvYC24Y6ox6ZOqcKK1CkdDo3hch1B9mx7ygB4whnSTZ+ocMAzzON\/GiayEsI5iWyMNMyNRUZkpabFVNV5Aq4wOzwJTIleSQsJvcxtYUpsvRaeUE0fOBoCPm9BPAMCaUBiixhbUxUiJ8bBhqIhZBwEDzeVPUXnEKKAwAQ23hYh8NrRW39\/+XSH0\/npr87zhs+JuGqIZThxdLBGIiCkXGwc7PUzhTStZ9J3ZYxBFW7e3d4+d078JE9xtvlZrNZkygcRocBzbhsPscYX7QxnbgRqQQT1T\/M9facV7l3f6rVxMFc25m6O3d9sJ0Ko+bXfYz9SCSzi4PN6Ul++X+l7abjbiZrytQw09gNEDVwkZPbB448T09Oqg3DynTCGGyCaNSPzww0W1N\/0NUGogEaiD7twsCVie14aK9HfqYEuntl3qDYLGs7x7AL38BTEkSC8WVAfiXPjuGWOdZPJxHbcb1DC\/OZ2X+GGxphjBp9NHPM4FEkub0yy4WAWY\/uGjU1lRKpNpnPKMev1N16C0npF3QtE8IKnZ\/D90dHDXBXrDhyEuIDxdkx7yHGco1w0mILut3smycUOG542qKXWnpsnFXT5kbsRn536vJm5z4d7sbgfcOVpGErh\/lPipAqhTXctoCYpz7IJF2Lx9pS7We1czC7a6JcNGc0PGHtM40RYB3X1UjBnS80rqJcz47zzaGTWXZOnUF1wP3mckXDB8gADjnAD5rFKmmtbI4egBric5QsY0GY1jXNq5Z73Xp8MunOfvXUVjY8B1yv8Cd5gqt+dABXMbXbdhSBXtGsdGRJGP8vanBNNWSpyVxr5b\/eqNO5spPWBugvYkH6y1HyRZ0tax70TIrmT10fzyV2EIzMp0lnh5iU59U9W56T4qA1WSqWKy\/sQnXFBDTefGMK\/JsxsPMcKFU4umVLoM2WGSHWEXMma7PKmWlPD3VWq9r1ORx1UjfCeZ5qamgXgSNk48IhBtLGMEaOEI4sT1eS+yjZkjPFwL8HM1BYOa4XfqcXPDhTaxLHYF9\/zd6WLWWb3DTo2\/lff\/7xO+wr2I9O9o\/eR2eH9sbcm3S0URUGK72ObYtf2XbOexzH8PaO7egq0uI4yeNvHIydqOvCcnuTNV73lJu5eTM0qeauY+vO6rzrYLaKbz0M1LwQTLP99\/jUKUOe3TIvnVjNhSGx9rx7qpilWHWLkx5O6ZJPP8ts45jWr8wehvGOvW3Bt30uEvGy9zdQSwMEFAAAAAgAQmBLXF4dGEAMAgAAlwgAAB8AHABpbmNsdWRlcy9jbGFzcy1wcm9kdWN0LXR5cGUucGhwVVQJAAOcU4xpByGoaXV4CwABBOgDAAAE6AMAAN1V3WrbMBS+91OcQagcyNZdO3NDNjYGuym0sIttGFU+SUQV2UhH3coa2EPsCfckk23lz3GSptBdTFc25+\/7ObbejMpZGWk+R1tygfBJFbckCz2MohwnUmMeAxu\/vbocX39k0IeHB8AfknxYKG4tXJoid4Ky6\/sSfYRQ5xa+fn6XLQNXcl4qhJ9RBP6U7kZJAROnRTUFpkgZ+dK47zMgHIPkjAaWOxKzjLs6lQ3r+GJ\/n9JIgTH0RKHJI4EU2J3E7xXqdW85AU8Ic0kM0jRdZ28mbYAouUFNSdI1oD9cVQRY1elZ4uSsH9+jmbQvL6rSQCJrYvFGZQ1I6owbw+\/jZfUAvgDjvuYO2QBYyZ3FvH4yhUBrpZ4y+DYAMg499D3gx2Hqez31TiaJ4Eo4xQlXVNYIZe496GZ0fg4fCgO2UDn8+fV72b1+rxu9aslbRYK8QYw2wF5dnDa+FZayORLfweP5ZrdhIbOqosHNlryHXaSb1iOIJ6rg1A\/vyROcDA2XjU7BStxQCyyMHoXhwIIbnHr3zPMv+r5BWzL9G5WOQDmgluUKn1+qzin\/+Y+h1Ywd\/jVLm1X8vE7HfDhRoDD+kRKtRTmGtnRGzLjlN2r7WnqKfy9Oh7fPswlXFrts6NWebcNqbNwVK+RewGs4O1stcpv00W+rzToBS8av3u4l3t60+ptpqvYt2SJaRH8BUEsDBBQAAAAIAKFjVVx+UXf9HAYAABkhAAAhABwAaW5jbHVkZXMvY2xhc3MtYXVjdGlvbi1lbmdpbmUucGhwVVQJAAPtiJlpByGoaXV4CwABBOgDAAAE6AMAAO1ZzW7jNhC++ykYwFjbrZI4RQ+tEydIgQJdtIcF2pthCIxEO0JkSZAoJ2k3QB+iT9gn6QxJiaT+LDt2t4fqso5Ezs83H2eGszd3yWMyiOiGZQn1GPk5jJ94EEfXg4HPVkHE\/DEZ3f\/w66f7334akQn5\/Jmwl4DDZy+kWUbucw+Xuz9Ga1hM\/hgMCDxJGmwpZyTjlAceGW5pGPguT2mUBbg8I3OyECvxGWXeI\/PzkPkjMr8lCzKiIHTLRg584nGS4Ielo9erz\/hbrk9onsEiXB+HvrkPfiZp7LEsC6K1LUVt0lKKvewlCVLWW4x+b4vRThSa1LbltUIpfwgBHQXSKo8ElMSjoZeHAJ8LMHpsTIKIkyGo8QFrN\/DJZEZWYUw5oF1YMUQhOcKasXA1m60Zd+Wrsb1VqcYnWJGxtm0+n5dSJoZkfFLG8zQiY6F1QlB4Emfc3TBOLfngq\/ukGOSmLGPpVnkBMPA0Z2hAIfWtYsoZOOrSNKWv48ISxyaDHQIl8EjWgsKU97F1aKxE6hxX0dBCbX\/pu0BX1vNgw4i0Hti1p+24uUm0n6dUMJgcILrYbAi26aHF38zJtC3qZnSaw8dCmgDjwT70Yzwh5yYoNa3F8ncptUXdzg1n2kRagWz2pKCIxchz0DSuvqqwakK+Mu25tMwxIqpsSeM8gjKwoS9jpdSpSXTIN8XOt87sZmamhsSW8RSOd2Nm689RWN\/ATyNYKPBuZhaevqYjR+CQbWgQgZ2NLuCrfyszD8UieS73PXHG1ga0pO2Mc3Azwz9kAOIE94J1Gm+1BmQsljUJUgnQi+iMMNaCF6NygTz9S3J3R66+m9YElZgLQYZcJLw+ySYeFREq\/oLGU8eU2FGUyl7DjAI0QVYt6oyQkXCPmW2FbCPjvj\/dtsE91\/lEePG1lS7OFfjHwNrsA78QpFXDDVWFpy0uqJ3TvpkELFxDEm1Og1+kv7u6mPY4CGeGoA8f7INwtlvJtEXJqYJ63DNySEvS6nFRf1tbkXJlwRXMfA1V+7rGQrNkg36HbAJI2lf4SwubYNn+tl\/Z1ne3turtFLV7GLFnt+jfRT9Phgg03vmWSO6HOA5Nbnt5mrKI70Xuy0tyH6aM+q9gBwHMYBNRzPv7z79I9hQk5CHnxIf4cZInPt5HhRnjJGVb0JfBN3CWnYPWkMRblj6nAVYlgjc4l8eTi0q4S0OR5trLtsCvaJi1tG40DONn0YRKl+s35IVWJ2riYnltW2Ndl0zIC+G7Lkjt5km09mq2LDiMOK1iCJL3iOgJ8GlGhk\/sFW\/c6LOwz7Zuh3Lc7ZR7uxtjiW3tPl3hVLHtl3i9ZulsFsbrqk4LXtUBI0tVhFxIsSmshBMMXWWUh6Gj3DWh8GOXetXuiar5yYhc1NQ0GdkoRO5xvUcarcWwosP6glSVw\/QxEgzEQ3L\/6SPxIGZM099nIQP8JD1ht+VBEkjrW06qYhtysU+ikflPwdJYGyvpQ8mXsW5IUzZ1y2HCwiJdczVBlsrMrOc9y375UvahJ3OjHHi1umF29+\/wQ87CTudIMWvrZw2O41ptceQL6kOts+oRZKAMe9V3mqpngR3cAfukOgF6RiOQ+DucHPbC3VXAQijKpT1Op5iHVzGaFJmy9Gnf8GFp2wXYQ\/4qspejuk6VPt8NlxyDtmOFRVaOqYSPMq12ruZxMa3VRnduoLzYcCD9IQt6T53s38bw7zEa9f\/A5Ud2OYaCW+hqocc3X92UzWrVMnz2y8JV\/W+6mhMGzUn7Dbw+BynHsfsVfbFZzbKOP23VoBYqCkSlvQBm+aUdzkot6fDEgK2U23g1OTWThPyTTSdKWBUTb+cdA4q64xrZanXrgFbA24Ot\/0\/tWoJUGc7dWkO8dvLvEaKWgPQe1AWRd8h\/imgFrhCxMyyHxQRhjOFC2xIQbYRaKIPy\/XRXUKTbGI5CQ2OyeKaZ5J7fM8di4jlBOhXGwEIOF0sZLNO0O30AZ2XlMEqthYF9VguZbRkDLkloHycmi+F6K1vkV4Fo2pFrDu3pzWeP\/t58amTCR56RzvR4aB0X4uugq1vkfkcKr9aNCg6SJg9oR+JQPeHb4B9QSwMEFAAAAAgAXX9kXKcVIJIPBwAAuxsAABwAHABpbmNsdWRlcy9jbGFzcy1vbmUtY2xpY2sucGhwVVQJAAOiOqhp0DqoaXV4CwABBOgDAAAE6AMAAMVZ3W7bNhS+z1OwQQrJg90k2F0Sp0iDAS3WIQGSYRdpQNAUbauRSZWkknprgD3EnnBPssMfWf+ynFxMFy0sHn7k+fvOOcrZ+3SZ7nGyYiollKFfE\/GgY8FP9\/YiNo85i0IUXHy4ub64\/RigEfrxA7HvsYZlmhCl0BVn+DKJ6QP6a28PwZNmM\/iJlCYa\/ptnnBo4FPNYh6MT9CjiCESRf0gUYWIl4JinFJOv5Dt+8HfAAsCpAcezbB2M0R3C+PLzxc0NxmMULAmPEmaX0D0anXaACkHFasUkZVjFfAE7UimijGqsstWKyCawZDxiEoC1Fhywx+jn4xz\/uVfLys4WdReJmJEEHfgbFFeO5yhEbzYLYC6A5pSJObr2t71dpwwcUICZRzKdSV7g+OuZ58BcLlNoukGdnC+YxiSzd8VuORw1LhFzTKQk6zCHMPYJjEEfGdgqSEmmWGTtomVm7rTDrfIzFAYQiROxWLAIx2CsnXTjAowDqkHIUMmIZti+AX83gycox0YqY67nYeWg4CyKH5GN5+l+vn8C+yd2\/\/55Rdo8Z87DSINPpvvux343AsYzzZHfQxK9jyKiySR3SxxN999G\/qXVA36r\/fO36uzQbWq5AaQr7zuRC80chJGsApwdgsLnwbjykimKidYyrMVLHBnfdMo6T7SsL\/UqwRg8AhQxcRTxwWbxxkWTKNN0OfEBGfSC3DzEKaJEavTv3\/+AFwVlLEJRLBnVyRppgVKyXjGuew\/Y4A\/K5oJgWlKZLhmY2fKVZHMmmWwPPriONZGNwiKAbfQDIDxTZMxMMwnsobFfKOdl7g8jP4XUUUyD4fH11c3tXVCsBUCC6D0iM6C5boETdHTaSMfNdYDe31TOqyclJJwCksNfFWjJpBSgNrADlA9FFqDk9BxZf33ijySB\/ZJ9y5jS73rdUqXvcp7nfAiZTrExk38RVi\/ZTaQVhQbT6lAtPQiCZENzkfHopXpuuPrCs\/MvfAHF9+TE6OyZeovKr6ftoVrfLmOFvFYQjqA9SgRfMInII4kTMkvYS+2QCKCJKbo0ySUyjT\/aFJQnJ4R+yyDZsRGoWGJcBG9LGFi8l+p5I1YMEhmxRDGjJ\/QRacI0NBFIGxOkmaRLotg7dJ0w+B89kfjFkT6X4k\/GIb5jW9jqcUBJQrPEFDor0RkMxvdSexjACeeJIHpkKSYVSuMV06RmwKDouEq7gzxOyuDkEbRXOIWYN41F+bBzdATsI00WhCisrk1q+o3QYVXgJ3R8dNRgJy3XNdcdCAkNlqMDX\/jtG3Bgo0QGNFMaXGhiwzo1D5RxU9RlTOB+gWiQQoCAqrUaeV8h8U2gQTcDMeUjyV+xmV7maQa2ZDZ2moFdNvwOkeuOd6XbSmC\/GtaCrxaA1rqxZitXZXIY00s3OHeMjsdtBlfZTAtNEneRssdbTO4lnb17hDts\/qa4LXB81QP5wv\/lA8sev3NDhKYzARuivALBT2vZXWgif+oNcYsHIS2Mx+wR2JrB57s3SSXZyzaH69RS9PTlwFUWqST6q2Bz9jHDnO30KoT0GuhSkzTuC4CdQCtN4JqpoBHJBzlFQcZx9oS+\/HGJL\/2rsLWw2V0+N6EPxLM4ScACeB5LIHczx4cFqmOBFpHREEiYLbYgFhKDANkKuoNOMLc6CChdgmk7gdzqICDwpYS8xcedYIXEIEAa63Unll0cBGPKUbeCbnWYpaDkUxH1GCsXGKYeVHcoyt0a+vVRI9IPD9FFmsKkppZxmpoWClg8J0UOs5xCsUZAyGiTEtBawQvkPfCuWQKKOdUC4By65VuCVSgl9AEo2rTZzeJlnva35gmo4Bo4R+UFq1u0H2gDWGIcWwBLDdn2zd8ywjVEU+Auczxgi\/m44Pub8nkDdoJnGR5c18vPffdyz1IQwcAYc+Jq4VZbBz7oAqdXNTDzkChF5vuTrdHbr5VtFtmmc+k4ME\/S7uO8xJbD8gQN+g4rZXH3eYXQliOpj6x+gzoy67GmFdg5Alpe3zdboYPNPaD+LkVkchqKZzgCvtqwwOS8mJo2b0s00NJi+daSrVLL47no3dH9XSABR9lvKG3sYm9lROAmwFf2E0379uapVY1MK1HqB65sr\/HJ9Bc3G9WGYDjqdvbBwBaJqQLmFs5PMKezlno7ACuOKkDF253ALKNUgCgEaA9GaSIxKGHdZC37nnunHQ9YBIm9kqpbd1MIySML63UtSyM7lG8frf1E6XpH02WWBrXcdt2fKVRGKVTB1jlXMvcdtDH\/0XzS8d9GcSaTtpQMfD8bNRDMxfrGsWdECYwukDRfbpdSPNmR56D5Qe0VM9dn8ycC2JCIRd24xd+H7BwGRuVZkhRfhFqHVCdqFXVx91s+H7co2umPQYOf\/UytFFqLTDa\/FpmvG2RBYr7bJyP3797z3n9QSwMEFAAAAAgAaH9kXGHDxTiCDAAAtjQAABkAHABpbmNsdWRlcy9jbGFzcy1wbHVnaW4ucGhwVVQJAAOzOqhp0DqoaXV4CwABBOgDAAAE6AMAANUbXXPbuPHdvwLW+EpqRpJz1\/YenDgZxXbvPJfYnti5Png8HIiEJNgUoYKgHbXxf+8uCJIAP\/SR+No5PsQUsdjvXewumTfvlvPlXkIXLF3SkJHfYvGguEhe7+1FbMoTFvnEG7+\/vhrf\/OqRPvn6lbAvXMFyGNM0JVdxNuMJ+c\/eHoFrKfkjVYykiioekgOewF0CaI9JksXxawOVTWJYNUDTLAmRIimA\/T6gI+biU+LrveT4+JikLJ4eHVVobUi86utAlj3pp37\/dQn5XN5JpjKZ1LflkM+uSCWbQRAKAJRZqBxOD9Scp8O3POEqmAvxkBYkuxDZkBYeGkXBlMeKSdB8KEUSpOGcRVnMUm9AbnM6A+IhXG2Z3BFLTASgmhQgQmLOdslmPAUiwVKKCGQJ1GrJ1mF4MJ4RALnwIaCZXsh5OgE+jo60RwDqGkCO07UoTwMaLXgCktdt6BDVQMGCJZmmM8afFaFSBg3g8t6BiiX\/yljGQGmSL1VdowgBqJmq6xIvQ1ybrVCaY2jL2HgdHpIrugLW1KGQEZNEA5NFlioSCxoR9sjk6mnOJCM+T8I4i3gyI5qLvo0lFWRBk4zGROMZYuBkKQnnNJmxlNAYAJTksxnQMFonELo05v+m+GNUIjtBy4hMBb\/SJIqZzKXxG+bZtw0EIf+0DCIBzAX0nn7ZZDMAXqflKfiKYknUregTKls4bNGwQ1ayVAV0yYPS1T\/hk\/GStziMBCWwhmueigeaNCn+k6pwHsPG5tLHVTAOQ5ElLWtnC8rjtPn8MmHBCSTAhxbtO8H\/JEQoFgsmQ1Y6nJbE0ae7Qu4G5MdXA\/JTPY5LrHa8B5D5WKiEbGSWDVmhlccZw8DgcDdXi9hFmbulvbyZ0zb5U\/DCmAUIp0QQoqco9kU1+HcWv43UC9Go4sKiYcQopcoWCypXrSrjyVQEEU+XMV1pKj\/9fSsSdIqOns7FMogF\/MMVWwSKq5i5ZGQ454+sSNfBhEYzpun8vBWZKIPgKHdbalmjrgXIotrcCriVKhQRs88bg9vBVwKWq7ucfZh9tdUiATFq7312KpTyqG6etT45KO+ddFg9vvV0gg8gi0Ky8e6gGrl18hwwBiZ6pBALx2\/Jz68G7mppc1wNAhDkDPGRjzm+QaWioTbCsFRFv8J0V+nEFDsVg2tFbq0PykKlY5OTi0BF+i8WlwNyYOMhjRLPc\/zI09Ve9xZLnCsDcwMwJtGvqfQqjjba25EbXAf+1CytH93WOEcza2Od4mMyLp2321pNE2nM6zlsJFQf9VX8qPTdVPV+tVZUvGLq6LFL1xaB1vP4wFQmlemGb\/FQKJjNl5vlhpeKODI2NyjqHBwgSC4toPenEMKqT\/SJI+CUXzBF\/RpVHvl9UHtQJpIKBZgDCnhWLzyMmN4b6IUSol3luFeaTe8cIpLeW4+MSAoPEjX1HRR4afNfX344JVSRH9ItI7W4nsKcR9+Rue\/A9YG89+YQ2XzrtZoir7IheUpJV36hVkyCHvuy5JJFyFaqxHIJt5juc4V0mX6tTqCaY0YpWnbj9OQMn68Vfzs5vCJlbXQShQfMd3pJheN73KTgeCtfQZK69v9Of7HE39VhoM8YA5FHBk0GWdIsZVHVNxyEmZTQyOB9Pbhz4paKcjby+z\/GCKUBIhZr9dZ1UMiL6+QNZLk6VCGPgdMQG08Eu97DEwH+\/EF5FlG\/aIbd78gFVJscPS43+RaZQHvs75w97Xi2WVIUYxcTFDnK99mKXIinbWIA+9EUOt5lQOM4UHQGtYZl3Db31PJsKPJaCm5nMjOLxQSa8AJ\/U8ffaO92SxdlMtj6tw+Xv92cX14EVx8+\/3J+EZyef0K\/LSDSw7ydGBryh0aSIUoyWs6XVsRrTqHtYQH7AvVd6luEmibPpxKsgqmXVoZhSB6fUzpjR+S2XrbfYT5pPCU8Ou79+NNfe3etpmiU98AmVQoy\/hFBw0OqtOowvXJsb1IoGLg3j3Rp7Wm31nCDlsbCmQGURSePAOc+AcHVypC\/RYTQK5B3hE5A56r+\/EinOTVnwfmpkxILxyCYEsFVc8\/Uz3yHZEvkfmsW8dacqPs6hPR0JuCp1W0Ni\/EMRqAZ40Rei2uYcWc56amUr8c6DalaOBGTPM87mvpTuL2lZRACjRnGjCabJr7dygJfchV2RB4F\/K34sqdqahUzt5Ros58DUNfl508fUJc5\/cMwTQ8bGEYhTpocLLd3HVh\/P\/t0DX\/LRSeigARWNxijqCqxrE+UCwBs0p02vjjuMGrMaROcJTOeQKuHqMxx1xlBjVHki2rtvk1p97vqzF3Fs7dVi084xglxplvK0hG18FBr6pQqihp1RaZL\/p6mzMt\/QnLUc9NMxha6w8cfG6WmlwhIPV7xEzYCR6Fk4OCBXsonv4ituRfHxp9lXBHNR+05VX0\/RBAdtI3NxrbnkWc2W9aug4o4PreHKj4EVp\/4lQ\/eapignLzckXfvcGZXQ5Q7ViEt0jRFkwtmysgrXaciWN1JwWBhhhmkXpxoT20SlQUuTXRD7YzybyqaayTAPCA3qxjekYTZv56I4gv2ieFkDTTutWhFH5IABOgM1HrFwNIMKBt7dCAsgNajyi0WrkpUuNWeZxYAQbpaTETs27O0TQVk2yj1\/1hBbt0rlDs0x2lzUGnaBKMyKKxiOmF5hOna\/cP572cbSnbPvJ\/AcqxAd1e3s+lBOsmMr2\/Iya\/ji5NdqFWdTS3crKFCG7WTy4\/nF7+Q68vLix2oWVgbBPWUi3SKhyOjXShpdHUixXSni8jZxenZLlT0bKdFlmJy1CXLzeXV1U6ErFmUPb2uOSd6c+6lt6WD6xxePC0VYE2+24YvHdObnIj7czj8Ie29\/SEt5ieuKlgaYsMhfcPCrRHqrp57ENAMag1grrM7a1az+TVE\/S3K+vxSLOj0sjG5\/OUvVqrgabDMIKPRlE5iJFNf5ZhCRPjQ8j7YdDglj2DdWqkeRUMlhigJVPEAxczZ39FgNjVRvaoHwfDNev0tjGQsMRWnOaaD\/KGd8Yq0a8B3yK6NAavGAIqJ9GDFCKq7qIirQnBrvuIO8r5+xcYWTuAaqjJ6sAfbPz4mUxqnzWNgfXeAVxWGWndec5C4Q4ugUbT0B3jV610Hdb1PwKs2Xd1Qs7+ELPcNURpVu5aEePfAiH4v6z2FOWhhySEWSsOJ+KI\/I9gschPCKfXbFbGm4jeSV+X+2Dy4baqrKN1bi\/ZqHKIRtI2Ydf0Oxbq3W+V+t3U4174JaX4Bpj9IKQYmOhXpJ\/h22\/pZvn4E+WZCrlqWFJ215Ks1cf7n7buLD62MkiDDtKvIXWhXUDMobVfM697hnEE6xyZe5yjs5QfNMGh9owLo8WzjSQzl\/DYUvD2\/cB6\/n7P6SCUxfSakfT3vXwb3qcBvvvJPCta6bv4qIGcrEmGG322NgKmzR7j5gK\/CEyb9Xogf7vQGpev6zFYV8jBReOywETRjcPaMwlik0BP7vVEpjZZiWAjVqx1H+4Cg3\/BIOB8lQ1ZO2ZRmsTMzYyOsneAkX9IZzVXy2mEpFviN5jGyNgKexlCt8EkG53IvopDE9HKdDf0QZCNPPInE0whTkf6YbC7ZFHDp9dcFn9ZcDAku9fC0g1yRQHnUq\/GpU1L3Rr1c3zONzFee\/xBygSMPW\/hpNKJQVCaR38u\/BgHLlbUelFIz\/AjnCT\/v6rXvqjpJ2AlStUPljA1y\/m0QBph945QD0CWcGXMRHZHe1eX1DWyYiGh1BJgGBJJyBNblEDmwnNIFGwrJ0S7k2S0VRmoONUzpfxJtZGaRcoT+DgrYYk8jyaPR5SjNwhCa6DYAvNAyurzFiBjlCvR7Dc\/W\/R3IJ0douJHWMBSAtahvRwox14Ix4QuKA5xeBw5Ipzd8wUSmrMQAmnFxS7YQj20MW+jJ84D87dWrFjrPzpPnolaHv899UHrX264iD1fHV2OW7rxzaH+FoOEUk4s0vz\/G9KbHqZN7hnkbl+qDG+crPl2XTjmLo6LjirNZ2\/eX1YmLaV9KIf2CtD5Qq6q39u3LwIB1vkLUQnz7OLhC8X1j4eLaotTEa+MhX1wvMS4urrYy2qHRWVfi1agt8epQwUuMlUtVfet4uUTwHWPmionvGDeXSLYfO1dbXmj8XCLcbgxdgr\/oONpm4g8eS5ek\/hfj6ZLYS4+pKzd4sXF1zbLfNrYurkYqfd5z7zqas9rXsk5zpteW+v8A2SCdQ7+yN4i4xK8w\/UbOfD++PrsYfzzL6\/HDmCazjM6wyS5nY897\/wVQSwMEFAAAAAgAc39kXDX1Y4LoBwAAfCAAABsAHABpbmNsdWRlcy9jbGFzcy1yZXN0LWFwaS5waHBVVAkAA8o6qGnQOqhpdXgLAAEE6AMAAAToAwAA7Vlbc+O2FX7Xr8BmnJBq5Mtm0szUG3nHsbWJm13bI6nddhwPByYhGWOKZAHQayfxf+85AC8ASNnyeqZ5aOQHU8S54Vy+cwB9\/7a4LgYZXTFZ0JiRn9P8RvE8ezMYJGzBM5aEJDj8YXZ+OP8pIEPy+++E3XEFy3FKpSRTJlV0WHDy22BA4FOUVymPiVRUwb9FmcUojQi25FIxEYm8VEyGw31ym\/MEuEj1aSlQoiYDzTeVObu3r4MRCXZpqeXthm\/Pv+fJwS\/J10N4f9FIwU+wYuo6T2RgvyTjAxL8OJkHI5c2pml6ReObwKO9IFF09P5wNosi0LtkKqpUB+TSE1EwseJSwlrUSkN1EexFlSKLlCiZr5iKpWdhpXjgvwx4EhiTAnVfMCObZ4otmUCnCPafkgtmiFAVvJM044r\/yjyL6JUExs4WrK+XZPhm8HlBkf\/jSMg\/IBSY16Um9gMileDZEv0BdUPLVFUeB1NvWbA+JM1rxe5UtOAsTTr7qvcWFXTJHs0FW\/c3e89OBKNIKyE9e1yj6PUflHA2CuxKlRfPSMDzs9lnZiAqej4YuDJosuJZ1NJ25TwTHp6I1sshQmsSjEo0dn3uP0PRJonv5wk+PDzaaHzPYqe5yvPU6TSIBCQuhWCZikoJ6RbTDPJsRTPI\/ehTnsf5asVEDPvztAp+SxXrqI2vWXwTCViKUr7iqkftFi\/ImEiWLvb3EcXilKN6XoSVCk10w+5NMNusN2IDskNWyV9DLcfmiPMyU5ojhMANCcpWgmYSxYdGok0vmVIQLQkMSJoXqMMqsqgmwGq6dFj11ixVYSvtImg3H1ySt2\/Jd3tOZfMFkhtjD8a1rKHlICs2C5pK1ip+aMXI7u5GtdivEYmMWk8eZuJGcfQCs09MaltW7u4CM1swQT4eRT+yPM1jqlnDa5olKZPkKM3LZJFSwXYLkd9xJoeuF\/TkFMEYJZUEx\/\/iCsIpy3eLyR2P0KQRBzBKEoBLaedR63HMFk+a5RhYdpkeBt2nmjaaTab\/nEwvgunkw9l8Eh0eH09NrIO9Hf0XbFKiVgsPYU\/n0XQym0dTQA7AfLIlqgdwvrUoC2j4zNqI3t2rqp665dd1oahljEnGPnVlh4hpcZ5UmNYKAzQbYSeRsu6+wTzPCYDFPamM1aMI+fabvxEvBo3W7YNrRhMmIN5TpsT99uFCGWz+bi\/wuWqH18y9lbAFyZWAGyMYo8eN27YP0L0FFXQVmtZgF+FWTMFVEUKCDTC04BpfLJFvPJ4EH8cdcGnlWVvQodElTF6Nx42ANbW+JhgV1wjGGKeiezwAdn2KI71v8yJ0nONb9qplhNOM9Y1nkKpZzPIFOa\/Y59DjkCrQuSyvA70jrSqHAcWMg566Z27Uybosh1YIYNZNuUNTMQQoiKHQKbf37TrnJFTRpuEscrGiVtk1e7azw8fWJrgjIw1i4Q1rjwawYmnDtzEsyD9x4QW4YJJSl2s\/KtSHGLu116cLYFrRuxA7KQxSYdXo++W0J5LhiLzGOLsiURzRdtQiH5VmJDkZtkzzK5qSrU9FcmXD2C1NeVJVH8NJ5sI+aRUU3urgSISQMq2+5Kn+z+4KPaJWs3yB0+plByNgiqRC0PuwdujIVzvSY0Vft64iMG6M6g+UyhVsrh6m9CaNS26pCF2JZg0GD\/AWc9fw88Vs8n5yNCdHZ\/84nYfHJ7P5ySl8LVY7GqZ4MuywkHfTsw\/kt1oykMFZiT4AT5f05PR0MiV\/Pzs5dRgkUJOzU1LsnBzDNlptXQkff5pMJ0iBSur+E7Ujp8nILh8hh6fHDR\/4v8QM\/VKupdyxcBl11Lj9Rfc4U4XJed\/6yWmb+WIB4KifxzhU6dTeJq8h9H9pa8fO\/aYfoBVWaOM8\/bzQPubd\/69QdhnOpsewqR\/+bcw\/nsyOujTvTz6czMmXCTl79242waf1KdGzUMe4Z8kkxyZpVLc3BCwLcaA5M2i1JHTzhkr4zrtz0yNjT4UkhTv14MccBp6adPpOCo3VcBjcZJywee3TROuGpztuo7Mz\/vU1zn9tfzzfniOYAqZXqLoxyzkEFY+6MeNpWHPvWg1x2DfzeC348cnGvjF6wWTzjIHf2jre2OjndSz1pU7nsM5WhcL2V8l40Vyrb2OyZVQp8+emqVHBJWkvkPR0++fo\/zmjPyRnmaJvKs5oki15xvb33Uy0TB+Zmw\/7SownIYx1TfT97HjVqHnBnmOa4baru9v+XRsacsVINa1BsAhXsr7A0+XGnsiXJ22SZRyDdvvesteadmLsPdqsuVby8dLJsRY894keOZ1Lw8R27bghNjWMMbKv9urJv5e40l5nrnOHWAUe7I9ZT97ENI3LFE8+miLUdnmaRc2uZ6RFmtPqMlKXCzZ9zTbyhoWaLajHaRe4mbhljVkbSnXYLLmds7H3Y0FbDs2FOop2iRRXKbNu5pHIcTP+lgqV43K1vxu1XH2zRuBEIjCEzjuP3mQWnEUrDqDHK8siUnQJ6ATgWEfMjTFAVddE0eptTBT9el0fG2rnXcdtKwaBWVGe4U8FSO8nmb5bcsiqPPN\/YhH5UuhabXzZJ6om6xcCqBIVpYivqWSBH0Yu6zV6lUIwyVdfuascUzePb+w4X\/oIWZ9DyRgvwara7AxzmIoXhtTyz2VPEa71Ty\/iGRP0mXcTA5CwCublM+q35eqWbxd+ta4aMB8G\/wVQSwMEFAAAAAgAUH9kXFbubE7VCQAAoy0AACMAHABpbmNsdWRlcy9jbGFzcy1jaGVja291dC1oYW5kbGVyLnBocFVUCQADhzqoadA6qGl1eAsAAQToAwAABOgDAADtWt1u28gVvvdTnARySAWSnRS9ktc2vI6LFA223nUKo\/AaxIgcWWwokjskrWh3fbsP0Efsk\/ScmSE5wx\/9uRukwPLClsiZc+b8f+dQ35yn8\/QgZguepczn8Lco+ZSHSXxycBDwWRjzwAXn4tub64uP7x0Ywq+\/Av8c5vjYj1iWweWc+5+SIvfesziIuIBfDg4Ar7SYRqEPWc5y\/DcrYp+oQhiHuTucwGMSBrgU9MWCwGNyBXJbJomfLBZc+NzzS\/KpSHyeZc4I7sDzLj9c3Nx43gicRxaFAcvrlQ7cw\/BkM2U2y7mo6Ws6uK7FQvCIs4x7UeJ\/yrwk9rgQiUA+I3j7ZgR\/2opdxcgXnI6biADZR6hgL8z5osWUCKk19Nhb8JxVHP+8FceUrRY8RobJIo14zlss5tJi7XVbKlCdjgxcZN6MhREPNrHQq\/Zh4LPY59HvzENrYCOPZ6lKe3IYP+zIpuJzfAyp4I+4BIIE44yPM1QNYHhJRmPc332mKZ8lgnsNL+mPKXVuWlIL+rQ2vpn\/UxEKFSsuRnsOA5Q3KPzcC4ORulFk5NUBYBqYJklkpIGHKJmyCAbLNJga8g7YbMZ9tAucqmfjs58KLlZutUKuUk9QMykT3H5G18t\/XL+7+HgFv5QLkyynsHpqrYSbq49AjygrFBy5OobR2stv31\/9cAVEj8Q6hcOgvQbg4rt3iugnviKS3iedarVjdBA2NqmT\/PU7cB0y5yOFs5My1GXgDF+OWnsNtVvPhtU306PCGbjwFk5PTw1lDw3L0IVu95eoyOZwew3J9F+4CHyGeQ1kKoUA7Y63br7\/AFkCDxxzNmmETg+Y84IMZoLjbvQsdmQRXqaeJOQFnNzdtX3Gqcg41pnpKlLpp9WK5tZax7UBPfI\/1F7thyfPp4l\/fDJJHi64O2yd80Py8MDFZBIlD01yFCmeDhtKPBeFjCTvKn7A4jCZ+Czyi0ieSIS+rRwY9ouhdOnlgsVZiKkCw786OEtDz4Ejm1TjyILnhYghFwWvCT\/Va\/TzGYsyvk1mMKtoKzNAGxIM0Fm4eKToc2dRwvKh7VP9ZtEblb7IJiiCqZ2BfIAfTndUtp2C36F6xQK3wXLOclBBDHmCkmY5ptkjSxS6Q6KU3L85rSUcwnkVyzCBMsAb7FR4Ke8kNtNVSgBMGViquMYw4Na+Cf\/57d+gSB4rJsP6aNs7u05So1qaVgKpZJB5pFz26hW82NZ0kgCxEnlluFYe2iFAbXJVbHa4sw6XPTKJSXAvKip3WOrclC90MFG+0P7UPsQukW8oA11NZyOQgPekjFxgCmMQwCoEXxfrLVDeAfmlx7yA20t3OD7z0UItO6sM02mtKunJ61S6l18IQahJP3LNiCdJeIB3M7n87t7QNUEirD54mvos4zNJET+hw7AMBrJmn8GAwHjroFqUMMs4KluuuXNMS2tNO\/cd3kyXn8R5GJuJtiGvFMIwGSYSzKDDtbwa+VwfEpHibDKxYZrlYJVqzyfwpue8tcpMzZKeqq+d++hSB7CrgbntpLWroQe68rlIlhDzJfx49dnnqcS33ewwPOJ81v2QLs\/D+LhJhFhhhiAwo0oCyQgvD7OXMEe5WEQIZgVTzmN0euHPKfowBQOLE9wlYFqsuDgiUFYaYxwUuT8fa3oY322QVl7kbEjFy8M8ahadzk3tu8P1vlOb6e6eUHTNwYwvY+fx69fqwWv4oYz\/eFVpR6YG8qnbSyiD3Kw\/ij6qSPbK2VFJ61r1LRl2Kil2O7hAUVrOUbGEExUOglnIowAjChahTJIlgeNtIUbdqLvAhGArGBDwHMGPt9feFd2HgTpbB\/bQsaIXjM\/Q2opW5soJyL5pa6tU83+VYqzdGgLR1YZWJKVa0I+qKknNfkuhCU27SzTp3F6yjDEMy1NvizdaXUETLFrHsjid9pSd3TJfuw7b9un+ZoXqpiJcdfEdVbjuuM1+Ww+eyAnYFLVDLrdMddeNrajI7pxq1IAud35OpeKkFT8VnV1Ku9yEnJe+R\/qVX12TVg+f\/QJR7VVBSJ6erYvC3vhQ+5Wv2e5VxkrTuuXRTfvvHbY6OPYPukEjEH6fOBqYsUI3eoFbW1UhYldK424pLQ2tnCyJCAM7\/HOq22cHm440lQPA3gaidrPxmW4mSiU55pxRQgOtUqpFcYLVKkZgDuwRQTCbRnx9xe8KaXRrmskhbJANpuTxcY7Uy9Jq4g0eBzw4gn8mhVCzPflUopDqoBtABypHjau7zpJ6GZtxbCfU8MYtg475flKgSZB\/moRkGxHhOeURsh7B1GuBNW6KncW3lPVAzzehiCNOHSxJL11Ce0K0gjkaNpN4zGhkafNRk+Rl8ohnmsiHoP0AoUpQ6VOlAbyJPbPVBo9QpRV+k\/wV1zA\/avufVZFeGBUJ4UAreuRzy9mf5YLS\/KrNk1KSD2hJj+Dv0i229IZtHXItx2sNB4NAGkhmStTtivZIRMQeWBh\/zW5pf9ow0W6\/iNEADHslElfdxwYRv8spLaamsiL1IcsSx6n1BrqaieRnHuvRVReWW1c55aBD7V0zNWvxNBFdc+RT0usao6mzqi81u00yGQQy9oghUwJG6\/jjkrw5tvPzSg2N5WeIP85BoHMELhX1kvKxvWyIHcjbN29G8BY\/YntrYh5Vxsnact5OzYJVyy0pRpX0pkI2kbD1aZ9sFzJKOElCy7nHdi+l9z9xLkdIqNldSBgeMyph0Fq32u7lUc\/rLz0trgFge1b8JTAjDcZ0Wdb5ngc2VRNLtrBgxlC0WRgjKv+Z4MlOof0HXu0cZnWDQusFa\/tt2V7AsLOhMyv1M4ZPJcKU06ZumAmuOscEDrNhWfNZkSfjbWHgXrOn\/l1a3\/sNp+haM+FW77Q9eqftTdXgCmWLiygaWe7vF4j1F7pnQMt326jMAY6+QVPc8l63fI5WW\/nKQ27R\/tXacN8lXDOS6Xp69pjji\/RokpMcZlbjdVlt+\/TeNylpHvbVqx6YXPHqG5vsEJB0bQxKulTcmaNbo+OQiJfGv7nRlu0TdN3R0dYYXV0uQ1dzAmQnUg1CDPS1JrtbCKbVm0s0AluSMpFMi5LGaVtSaqCR9miicpCtvXBAY4GO6iIzijZP861HycVCdp0VUBL\/CisHtkZ4MPRpmHKogAa4JWiR50avljOFL1hEvmCN0KazzLmxLGxREFCBGWlAVg\/HdKPqh2\/\/s8JQelHdd6JJO37OtNZDpHe8I\/OVQVC9tSIIASynv64MYxqX0NcRlN3EYXZ4ONzDE3aHEojXyx9alFG3caFKVD3rKPm0Xcu60\/3+vxG8fa2TheG7flJQ0kFdcnefrkc51FfS8\/zRdzwTtO34zqdjNPV08F9QSwMEFAAAAAgAOoBkXLKWSkWmAwAADgkAABoAHABrbG9rdGlvbi1kdXRjaC1hdWN0aW9uLnBocFVUCQADUDuoaWk7qGl1eAsAAQQhAAAABCEAAADNVW1v2zYQ\/u5fcS0CyM5iye2wYVCcDG6Ttkbc1HCS5sM8ELR0tglLokZSSYa1\/31HSrJk1822bxOQmOS9PXd87jj8NV\/nneD4uAPHME2KlcjgmqcYwlUiN0bIDC4KE61hVER211K7m41DgLUxuQ6DYFOp+5FMrdIF6kiJ3B6Fuy6gq\/ABlUbg5UEP8oSbpVQp0D+4l\/KtTFNUEcIPcCE3PIOUqw0aUovQt94\/k73zbL8f\/YH\/yp6OCrOWqjyECcp7XHx0hiJbNfI94AnKR1yktV6NfyIizDSWzt5PJ\/3X\/qAvVZ+QorIKt\/hkCF3KBcGos+\/HNtM+b4pVasCUm3UIQcKzVcFXqK1ohn8UQqEGbiBBrk0IP\/uDHcn0wzSEX8rD+7egvrVohAa1wRiKHIwM4dXA\/4kEQacT41JkGHfBG725mY5uP3jQgy9fAJ+EOa3FJL2afLq6HX+6Zp8vZzf0652A50pL+qcH1KaTu\/fja\/ZuPLkkVeYWjD2rezGekWru+MNioVhOZem2bJ+1vptNdq0Llfxr4zejm8vr0cfLxsOCa8yI6vsuOjpPGC+MTCSPmcKVoLqqLiyLrOIvHEUJ15rU\/+pYehzlisI+2eUZRa64MJ97p6XYRrKArfhAScAHT2RRUsSoA7JxRmJJcbRRudR1vJNtoB68ODuDwRaA\/RSaQmVlxK+ljyOFRFfxgBRXFwvy1riiTYJZt+WyV6FdigShzKVBThCdYd+jJdna6jzaqtCaauQ6swu\/gUdZE2+YB7+f2G1gd323a9BQLOvQp9Gzk66NzIiW2ticHY7eXo6O\/0xmNBucQp3vV3dz2yuq+5FFa4w2rLJLMSPPtUMX8gW4tLZRvdb08fai8zhm3PknPR6nxKFMGpoTmpJs2NE2sR9GawneMBYPZayzl6iUVC\/Ph\/n5kMons9X54WE7DCpx0\/jt4WgkLBBEpg1PEup8ntFfZCvsDwPyHVDI84qDrkr1FTd0gSVP9LaIrXOjCjomHtX8d5k\/cFfUtZSbpmsO5b5zUf9E+ZJYdR6qooV1M9\/20riWhmEFBLuUTXntW4wx\/m9QbqG0cO4QqJxCmtkpg\/FBBlUMfZ7M358Bu9jKVzsMXQaUsIN1Aq8H30JbIL3DyB6ljCquMZEJ832Mez00p4eWnj1DvTFvEXZ+Z0QijEA9f4eckKK2J\/tt9t+sbaUpPMElrPSciIXV+pNQRIUmP0yqmJhh+CJxfdrwwVK87ohqgPwNUEsDBAoAAAAAAJ0ES1wAAAAAAAAAAAAAAAAHABwAYXNzZXRzL1VUCQADCrOLaTISqGl1eAsAAQQhAAAABCEAAABQSwMECgAAAAAAT2VLXAAAAAAAAAAAAAAAAAoAHABhc3NldHMvanMvVVQJAAMVXYxpMhKoaXV4CwABBCEAAAAEIQAAAFBLAwQKAAAAAAAIBUtcAAAAAAAAAAAAAAAAEgAcAGFzc2V0cy9qcy8uZ2l0a2VlcFVUCQADz7OLaXH2lGl1eAsAAQQhAAAABCEAAABQSwMEFAAAAAgArmNVXLslTvxqBAAAMQ4AABsAHABhc3NldHMvanMva2xva3Rpb24tYWRtaW4uanNVVAkAAweJmWkpE6hpdXgLAAEEIQAAAAQhAAAAvVfdbts2FL7PU7BNAFJowmUNtgFK3CBAMqBDm2aNb3Zl0NKxxYQWBZKKa6wG9jR7sD3JDiXKliW5STFg56Klef5\/vkOFzco8cVLnhB1F5M8DgkRLC8Q6IxNHzw+qq42U0\/O5gquy+jUWU9YoeXoShrhVAWREjhg9LIxOUfDEX9GIPwnFovONsJwRVguPRoSmpUuyiajt0rZRT2hNSf6o9KNnT5yYoj2b6WXb4FbQZrIoZD4PgplMoS24JqAwwxe46Gke1P8e1BqpTsoF5C7iBkS6YttathPol2xrcKBMOmc0yUQ+B3rc041CP5pqH1knjLvVy1DyySaBijHJ9ZK23NUqSQZpqeBXCSqt9XhLL3AnM8+mbYedIbgPkqzXrR0PvJZmrzaxcmkZjVEmeQT0sFPfnfHYaijI5y7rOurG0ZmFjfZASRulYeft1lbKSiaPqEsPmzqdPJTWyQROpi5Hxrbz0A0SeGHgCU1dw0yUynXDxLhSBb\/V5q4qK+yIuUzaCB1u+hL8Taalc9q7pNbpot3cdbtX35FBCgrc\/59I7daHFE77UtmENOgAwz4m4kF8qS\/wXGMFwdRNwE8\/AtWiqT5adDGpef1N1egGoL6vQIN+eSqcYLTBr0zpgFKunZyt7kEpMD23NXNiKy463gUGuSR0BZaSmNBc01ZJPHmAvArpfP0aEuO4tRcsCnghF+SsWwRPAr05Ru8U6gDBjmJooikNE454hiNnBEFjsJ5gbMS7yXky4EqT796vD3o1SHQ+k2bx0c6xAtv+hM1fd79nG5O\/MkBWuiS2DIelyB0CmNzdfP54dXtzO\/7wB7m++XAzviF+zkh4Py7JOIOmXWQplSJTIAv9BKnXdkbYjPc9xt\/w6Aek5wN\/JSLHJnrzZZ7qHPhgm0IB2LYQ0VBfXlhObeRc5kKN4YtrRtHhubcAPQOrUDCaSiumCocK958pIarl97TCl\/7aH\/EJ\/eevv6v5u8f8i\/A76qR4xD3+WD+f0qi4wiYejnvcBbhMp2j77tP9mPb5Hl3xQJU81ZHHbeAPyoUZmEj0s4HvsGg9\/nH4f1hmB6\/xDrb3KeQJxAQBXwV5lS5kzqvLvvy6f2XLJAFr49ZaNmCHRseTHzVk86C1T8yTH6PFd8GxTR6aNQpILZ42kc5KpVacfIZUGkj8AHE+gLQ2xVtjHmRF1xjtr52G\/JdL7zmzEL4heeYWitGLAu2uFIxeJ1ppEx++hV\/Ss7fnM527kyXIeebin09Pz1+\/o+RNVZQ3hF78ULwbWngNWXBjuQBduj0ffUPk+7On3M+pelpK3DD4KaQT4W3wzMAMG0ix1o4XWXFZaOsm\/ityFEb9G6XzNPgdPEQblwaUFml3z\/Ts7uWuj8mPP52e7tF\/Np763fIj7neDf\/XopwJMFRuZCYkLbvCZamh4Ic4Eeg0bsb1a90X5EuCCMThq5PnZCE\/xLbilNo+1HifhZXZmRcRc4MrYl9V\/zqgT+7r\/xw7erCP28HsJZoXnfwFQSwMEFAAAAAgAvGNVXOuA6OJOCgAA2ioAAB4AHABhc3NldHMvanMva2xva3Rpb24tZnJvbnRlbmQuanNVVAkAAySJmWkpE6hpdXgLAAEEIQAAAAQhAAAA1Rprb9s48nt\/BbPArqTWUt1sUWAT9BZpmt4W6CVBk24XCAqDlmhbG1nySVQe6Pq\/3wxJSSRF2eo+Ppw+tBE5M+S8H7K\/qPOYp0VO\/IB8fULg8eqKkYqXacy94ydiKV0Qnz9uWLEgt1kh4N9STsnr168BPE\/YIs1Z4gWkZLwuc4V1R0vCMvKaJEVcr1nOo\/\/WrHy8YhmLeVH6XgTEbpFYSGtB1AuO2\/MOWOagFxf5Il0CTXlXfDZlkQD6++TIuFzUrk860CLL3ueclXc0OyK+Ca7tkT\/+IIcBeUpeTKfTDp1u0je0YtY5arUDy4s8toHEWgcS12XJ8vjRgmqWJeBW47vilDODbVypK4uAXLTP4ZegTPtG+tZEp1o6wbuNDrhkFYiLucD1rQ6Bp2v2ka1pmqf50sIw9ia6dpdAzGa0We5LCvV4DbRKkFZeZ9mxZjt1zpPiPndvs7IsylOEga1pt55Wv6ZVOs9Q\/LysmTqrdZxFUa6pFI2\/wX8DTUvSgJXZtvolz8iGlhV7lxWUK6SIF+\/SB5b4h8oJttY59SYBG\/j03of\/qH4GekvSaT+QxqLe0P26veM+krKDmbgFOQCPbh26oaSbSkPPQHOQbRTkptjuKmrNu4MQ2sWsbAzDTc6wnYamiai01ih1TpMl8sKy4aAkYJqQ1NxJLOrSNyhWhos2DwUF3oGHfCUZnTOIPN6H97+eeRMSZ2DXntz2yHbSw9xQCMaJgXlydU1Ofzk5P+0ISCgngSpesaTOTBpX1ycfr9+f\/5tcXVyct1RaUDehIjNpXHx426HCphOLPWzS0jz87PztWYfJQJUDB\/Jis7HvfXF5qSErkB769rivHVCM1NCN7h1fMNLL9UhcxcQUO1Gc0ao6p2u0F8+0DmK+hqEHrj0HjMpFiLMHflpAjhEhZh4JvjrArWmiwrPOsj1GKqBmM+WOtrU2NH74gfhmVMDM3RgeyKC\/qYwqcNl6zu6bYKBHv360CEwxaFfShRFBsbGG+gN9uyFtH4tPgyoU8iGteESTxPdMWYShCJTg8p51uk7CVEVzaB++YhyzRVFzv18p7b8fhJ\/ijn3bFbcT8uN0am1sh6ykondAp9prJwrONpAOHUykNQKV6cm\/yNSl\/k2MQvsP5auohHyZ+L7fQw0duSMgz3tnqCrLYre9lqUo74reMYJOhnd4RrzvvR3+I3PKB\/SyyiGekywzPUnCz2aZxKg2NO87lE40yli+5CvhMIe2pEzQmxdfLF6kJPRCCeVNfna4lA4UEIh85wX5KNeG+V+k2f7g0bCMwDavuGYzhWugvceMRfdpgqxLO1inuQ9qnKg3+uDD31aul4ruCp0XwR4NYgYvhfj28CEAld5sLjoiNi\/C\/gfjnsPHO1K2WX6gFSfxikKRr3JeRdL8yLOcGJiA3sp9rgrG33YuxibS1ji984YEO68f3\/B8V2dWAbmMzSC+zngxi8FbZ\/Oa86LnEJLUONGOyjcO\/uUZNu9v6kdyXtwTykVA+KZEpFFN0opCcZ9gLqOgHqfKBu+kYcveYK\/8UTQ3smKaQP0jCyT8s6lmvkQpVCIPFwtDgjI7hi9s+SDWJbQ8oC8\/0D1JO7bNXCLsnjZtkG83EWaDFECVxWjZ9MT2rlZQ9xoryJot2nDa7IzErN9F1nFshKF2Jj5oykm6TLkrujvig4S1c64YNsgta+Cgn9NFbONO\/UqzDYmLrIBbcMh5P77qJTiEXJuQAPq9BAWUVy4EZBOBXk0dF1yJEkDyYUviBhuisM5T\/vq7VVGX1XdfbCmIC40kAcG+5myASDWSSMWgKU4UkZ5CgJsAWbKc\/goqRTD0VRBtaHKF1uwfgutMXTpdI4n1EIn1GBIVkuhXIYpEtYsEVHE4PBro5XFI0XO\/g3bS4LDDBePxyldzBDVywvT5XI3OnmMMVNvd5MvyuBWjCSsr7Km838LPl+E5jqW8owZRTKn0bmobtH9GfMVyzZshxbkcGpb1sP7y8CdXREdDARbLR5CmmIRAuBCo6obRknHf+4gQ4ckCIgnkBcga3quph3J1Ffba2Ecr2nF5oo56qmtEf9SQphsHtezvZW\/60sXeQFD+E+cd4IHFbUD4qoRcB40KOcM5le\/9cn19KRJfdyXrKHUM7v9eFbmRHob1ak+X2pvIjcYw9W1zMmXuuaZqrZjUxOFSeIP7djFFux9OIh39Z88cbT+Nb4vFQq9SobfCOrVxFX3q+1RCbYp79OeOcmDxtNPW1JEGO+4gYLJvBYP2DJWG9UOaBDzqPg5Gh+6jW+1fuM6fKCVcnJjusWN4q\/hoa1koWs\/u4A\/swFnOwFfuMKymWcofsUZfMggibovSZ70HLcFVmiQsNxnUYvXXnnHYTm\/XXZptuOrL3TVdoH2UuWlq6klbQE\/0Sd74WnL4ii4v3Xbz9iJnp1ka3+5pKNpaDODDGBFmszk3vvholPSbacsO1QpShj57GsEWlCHWW7agdcZt7YhAIW7PV6k1uBMtjlbn76gQ26yLsz1AgRR2wqFSgL6J+Z6ofBRImCauyklm30Fksd0rlub7mpB5v3O6LIsYGnIwryiKPAcr2EvJD3wi47xTr7bgGjCoRzYsT3xhjNAiTrox6Qy0N5Pqho7J5rpHQAlolqIdtwLdhyUlM5ECtAUkCyfzi93v9OFTKb7yec\/vNyFNIDE8F\/+GuBdtVhvPrp3wWTO+KpIjkODF1bXXn1nPi+TxqL1ffz+GVg90kFI5vqZrFhYlVMq5RUtLgPi4Sy9Hfh+H2LtWW9jUMdoFjgLxNZEf8hJoUGM+NPO8hwBT3EcgXopnRKuSYbrt4TvmnEOtNT40Y6WsCJGKcaM1XJEuGfm5v4SaqUuI8UB3QVNwiYhcQuaBVywA6RKatsg1cxXK2zsM0CEtl7qAqCaiFHkDZu5gdqd+9xU5nUS8c8bvi\/JWVicjuRvH2TdytR1R4fBiuczYZ8Gd1pTIj+EkplmG1ZLO7cjoMybyyMNn93i6twt3b9AZH3D+rmCzK9DsCjJjAszenm5PYPmWRlAGlKBVdevRkVALZKDxZf9gGf2Yx8LEoAFpqVomBW1lyUeVJwLSHnKKRZtJsah965H2pn3rEQBh2FZoDpZddMxvWg2RPF07vxgNfaDqke19inJQxqnFS6NF3hpiFByMLfQEsFHkNeJsyNgSbdZ3CVXA7BdqS8qMaA00JA\/vs\/rbw7QhXsg11H\/kRP0WaWCY2prTWDkYFtVak8V+s\/bPVbhZAWFA1biu8lLsu4ZgYgMtaiDVi\/3jpi62Mp0ojNNkx7njauIh7LYo1hGNtJN2CUeLFMPJ62+w8yEbb43yH1Py\/5+oMT19UvMjOLwZJUm4utsYHlDpFOwJ1F\/\/qY\/xXbz3JQs2D+RvOwZJZwAYJgV3\/5ICNnQjg\/wNR51lDN98z\/4CjQ9gDPwipT3JagDF\/dK8gvrxDYO6gfkANFHri7Ss+OkqzfSCR\/tQ6RbCwY4vluK3dA9g2RBb3wr2RkuoH3w0QoFOtUln\/fHI8ZNtgMv\/A1BLAwQKAAAAAAD2amRcAAAAAAAAAAAAAAAACwAcAGFzc2V0cy9jc3MvVVQJAAM\/FqhpPxaoaXV4CwABBCEAAAAEIQAAAFBLAwQKAAAAAAD2amRcAAAAAAAAAAAAAAAAEwAcAGFzc2V0cy9jc3MvLmdpdGtlZXBVVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAUEsDBBQAAAAIAPZqZFwmCvnaOwIAACgGAAAdABwAYXNzZXRzL2Nzcy9rbG9rdGlvbi1hZG1pbi5jc3NVVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAlVTRjpswEHznK9xEfTnVOZK7pgmnfkE\/oa2qxTbgxngt2xxJq\/v3motJAiGRil9gbc\/Ozs7y+EC+Kdx5iZoAr6UmD49JMm8RGda1sExQY5E3zFMOHkijFi2jHnJHlFzs4tVfIUAgy3JRoBXkb0LCw1B7oX1GZj+K5\/V29vIeLUKUFlBLdcgIB1fJcM69JG9JcoKjhRSKu4hjgHOpy4wsV2Y\/fdAsQt76+DW+9dns79w8BxyrBG+UoBbbiMGlMwoCT41a\/M\/9xat0MldijJMrZLt3oAuk343zMujcWjDxQg22lLqveEKELpQD25UWG80zMi+KYlts4wZaLmw4Gip3qCQP2ykP63KbWuCycRl5vpJmQEhBLtSNOs5UaY7eY52Rdc\/uvc+tkGUVHLBOY26GCgOzOVuvNqvNvbxSm8Z\/9wcjvs682PvZz0iildxXobg0\/TjJYHOzntzriDGQ7siFfJC1QetB+4FMPeP8y5It2dWpfjvoP9i7RSCr8FXYKRoTCW6ChEZAsFfvdTTApA99SRfrSKuxruOl0VNQClvBx7aDhktPFZYnz+1pFfv1lKZ9Hzu6RQCgAR4ajyNWZxQPZ8Nf9egspgLjREb6t9tw1afp+NWAB8sdm36ynZN\/xGBSjtl7hwzmolvHU53LgliyDIOnRDHW\/5JapDDt8eFcQrfiDKOTHVRGuk7uDjEtmtC4cXe6P2OOYDlZOA++cTQHXl79UKRWUgdPnOfxJMvqUpbRzD\/dleu6rLfkH1BLAwQUAAAACAD2amRcYLvFNHgHAAB1IAAAIAAcAGFzc2V0cy9jc3Mva2xva3Rpb24tZnJvbnRlbmQuY3NzVVQJAAM\/FqhpPxaoaXV4CwABBOgDAAAE6AMAAL1ZXW+kNhR9z69wN1opWQ2zDAxkMnlZ9aFSVVWVutrnkQHD0DAYGcgku0p\/e6\/BgG0MQ9qoO6tsFuz77XPP9Xz+hH7L6GOV0hzFjOYVySP06fPV1fpRPLZwHTavf1wh+BNQFhG2R5viGZU0SyN0TWz+eZBeWwxHaV3u0a54bp8XOIrSPNkjx+4enTBL0twKaFXRE7zYdi8CHD4mjNZ5tEfXcRy3T2MwzorxKc1e9sjCRZERq3wpK3JaoZ+zNH\/8HYdfm\/\/\/AitX6MNXklCCvv36YYX+pKCFrtAfzy8JyVfoW1DnVb1CJc5LqyQsBR2vV7LTR4LBD+FzlJZFhkFtnBFhI87SJLdS0AZehgTixtoXf9VllcYvVtjEstqjssAhsQJSnQnJjZ5vfO75q6y+eimIleGAZMKExvsy\/U5gudMFqiLPlVUxcCKmDATVRUFYiEvSvs5IBWZZ3IAm9Pba63aGNKOQxOvdbidF90zS5Agm+7atxyPAUUL0cKQ5xB18y2j4qKUZkikZqlVFn2mjV4opd7Z90ZlLYeA2HoW8zXqrhbrxzLIwFPlT56FSgWQXe+RejZtD7iLXeTCGY0GRJLiAKHf24zw9YW7LHmlWJRk9I7dEBJyxoGJoXYGWOM1BpuZGBtZbEa0u5+icRtVROppdaHYT2fLsj4ZzKUfA5ACYYhV1VhLkLLJfpKHAdUkiUxoACNwOZbo0EN\/bdAViMqI1YPMWA8rwSKI6M9tA3NiJI9WGjed7oT0hjGZmOYaS2gQecSbkACiTaGWQX1GodXO4PP5RVfgb\/mlUfHkkLzHDJ1Iaa64VaH9cIYjvR\/QDUX7uKqinzQPUx7NVHnFEz3AMxYclAb7Z+rDe8VZQMitk3z6g10aMp0qw1ztvLASqDwEEmASt3UbUhNVDoc0aLeFDGeKM3Gym7dsaltvruzkrFlgwoexOSJWyW7AUWoY4wkJoA3INoKhQondRe9RLGmmHA2UpLMSmhrLV28L9\/b0ErREJKRNHqwGT6ghVlhyNBmyn9Ic1Y2D3WL17Afn7A4L5x4jpjrT\/CbMUw795fYLGHu5RhYM6w4w\/KIVXPLlp61AjnddYCxIm2y2rLiLwP0+E8WoXQD+lp4KyCpRqu0v8BJvKy5AsYginWWoLA2XivdQ2sqNLvUmDcq3JivS7xvgbSEDBaMJI2Tm0pPTaDYdDgDsyNW43CmzZ\/DPPGugTYXHGgeOYRlFHqgrapZSRDPNmPmlMnGaZZg0\/r2NzeJ6gchJuAtTuzb0dkWTVhRh+8f0g8PHtvL1yuTXNl5OXrtyaQEIURVfWG8BgdMMGR7U0kI03EE+1zowkTCGIahVU6alnxiZUeh0tFsYbkMfV9fm+b4SV3Zgit5IjQLVqJizLifqIoI2hTOisgT4sONRDVrfb0aHm\/c488cg414VFnYLa4DnbedxcioZa2foKrTZ0HBV7zREqSTHO9iWDLwO9Xoo9WbNyWpElnU2vr+YodMU11YIFkbvQ0nT8VVsBCHh3IxtaeIEf9AXHp0ykRVod\/4Q53lhRdwXwN+KUCK1LkJiRA4g+VPQQYlYdghoOar4yblrzFTO7hAvisAxQPNjejJNGxPKnm1cfFonM5TSfmo7FdHQErGieEr76zHAxigYLj3zakmfiofvgAHJdV0LLkLpWZyx3vu8wkkTkuSlsxV+AxclxzDVFwZ4\/WW++KOiVXBielVDMDdEyKVFAbU7c9DAoD36Lxc2Odt0YZ5IoiYTyscIsDR8VDtR2TiRHe64p9kKAF1X\/qfq9+epf3le6a73hfEyxGQC9ku8taDqgjPHUNLGQuM9gDVSYY+TbamT2R071TNlyXXd+JyA3DiZS3U83nStnnOrUXRInoXbf7S9x94Wc6kxpSE\/QMaHXANOLADGtBGcZYS8jXJlgtUfCsXUBCA12MHGanTEOdSCo05YOAYYnk5dE40KSYt9M944Hk\/3ww17f3w4rI0YLCwh6xYUEWc1uQOXtTOm9G+dTbyScFoJbi\/ktRPt3vXFux5XdQ+tQ2KuJcldOts72m2QqVT++tlhvbpfFla8zlEr51I2xfAySE1VWjD5CxV57nic\/6VisM3a8maT64XklNkyO040FVofLkim96p6RaKrX3oSotuPoTl0Tz713Pc2v7uFkzA0GTe\/plI\/2ChNC39k5O82E7uHENVIruKAde24ui2aurtyJBeLKjC\/xzUuaUyeWiMuqCT1Gz9vL1v5GxHT5Ovhir7dSOUzXw3tQKVdBMHeEYO5iBBu+4dIxwN4ZjuDQS\/9PmOJG+iaY8hbDVC\/vbTDVp+298UpqiqjO1qIvlkBFu9+R0jgzCh1DvDkc+DeB871TcuSMq\/A4weReRwtltmbMseG70TAMZ0tFUIKGzygx3ymcb8kXaDPXeHoh4Aa1zRRscFWlX60FpkvG2cF3EKc9+1fTwowlb9M6TS1l2NZUSeB99eVEohSjmxN+7m95djCG3QqZU9+fK0keEgwi1V3GKwYt5c709vFNVVPjw5WU2+\/Vhdryi95UX76vmlI3XPtMCuX95B9QSwMEFAAAAAgARoBkXAcGg354AgAAlwQAAA0AHABjaGFuZ2Vsb2cudHh0VVQJAANkO6hpaTuoaXV4CwABBCEAAAAEIQAAAHVTTW8TMRC951fMsSBSQos4IOUQ2gJFIKK2Ug6Aqll7kjXxeow\/ku6\/Z+zdjZCA2yqeeW\/eR5Zweb44fwVzuFhcvJkvLueL17CcPYf35uktbNbAzU9SCRSqlkBT7J0C3CYKgIk7o8Cy2gOqX9lEkwy7afdr8C060oBZld\/rYIRjSw42VyBwas85wQGt0VgntmhsnPbX5LRxO+CghYyevGWT5M5xngbilm15luU6N\/fYg8cdna5wNFfWyGSTe1GRhDfC94c28BEbS5AYfKADuSQI48X10n8jTOwRUOtHH1iLOggUs03Q0JYDCR4ronL8\/66wKtsKElvjfVEpi+DbPhp5hBH2dMKnHJNRxX5LIvxAwWyNbE\/0JoLOouxxsjr1\/uTAGvuuqGuZxX7HR5GHujiGujMyywxnHbosxIPXMWHKURJCt6P4bAK6u7l\/gNX6dohO2HNjTWyn8T+MFIMQtInKcsyBZrNlbdni75bdOumMEAdRhrHcfFUcvC5qYDWqIbczjuBoUgtWvlCsCoMfCnvZueY9OrHFaXHRuES7gGMV71MwnkTtFIDPQYTFES6gwCiWplUmUaztkNumVEX0pWFwIERLocayqtZNubzLKRU\/nYYPlhvRs8Zc1WyYr7jrKMgUdVJvCSBJeKreF+FsSixKj1+UlptA8mFRiEsAior\/N5ZKhqJOcedltzT3YBC+7S3vC8AU\/Q+pFIekWBf6Lz2slOIsmSRsYm3ZxDgZEevdx0mubN1RpHCgUXPM3gsinLEve2jLQZ9Nec9WfDRinsgR5Iou4PI0khSrPkpe6eUWDxyMlNeo8l915UxfmaP4benU5fLnjbPfUEsDBAoAAAAAAPZqZFwAAAAAAAAAAAAAAAAKABwAdGVtcGxhdGVzL1VUCQADPxaoaT8WqGl1eAsAAQQhAAAABCEAAABQSwMECgAAAAAA9mpkXAAAAAAAAAAAAAAAABQAHAB0ZW1wbGF0ZXMvbXlhY2NvdW50L1VUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAABQSwMEFAAAAAgA9mpkXMJOsaAbAwAASgwAACkAHAB0ZW1wbGF0ZXMvbXlhY2NvdW50L2F1Y3Rpb24td2F0Y2hsaXN0LnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAAC1Vs1O20AQvvMUowgpQSJAOfRgQhBUlZBaVUigVlWprMU7iVexd63dMSEVhz5En7BP0lnbJHFi8kPBp+zu7Df7zXwzmd5ZFmcgcaA0yg60zy+ur85vLtuwB4+PgA+KTuCsv7PTi4\/7vcIWXRTGlCYhsvk3QVGMEs7ziJTRrr0P7VFiRn7RlTkfdkV5xIgeqXfIQAxXQKkBdADTjCYd2B17qEQ5Ytd7EHivwF9PqnuIEuHcaWtsTGTSFG2EXaUHplWaFGbLb\/tuchAWQRuCAlzpIQg9gepF7gAurBk7BIoRXGwyPpXsS0UjaBXM4CZW7olcC8iAkBIUYeogRosHa\/mWHA6ZRL8ijQl7nNEjcZdgE0FjJVrXLc\/968LFn6FFlzEPdY\/zkWA2Qs7W5Z6tb1SGTSm9skYyhQ0yyfc3Bf2QW4ua4MqqCF8X+poE5ZsIbwvMG5UifMbBK0fhfOMiWQTlnbkM+vNajnt0Z+Rk4Urhf2AsChZyrcCEg10vYl9nS2\/fzUoB+N+nMI7CIVJY7XWgozTtlbe7\/Wo3VJLfvQzkisxACXT7qWJ8W5VT+FEPuekEgccvTbeDz7yWYC18JJIoTwRhWFzYzgexEMKEhbCeQmFqMRVKc6PZ2M1Zk3oaqrU8kCAFiS4pSvC0NZOYILJbVW+r2UPhRUBscTCFj2JT+Mht0oFCDGhTkSg96jTRW4tf+KhD+wpZAtOCi3DWRBthDsUzkTok+eIYbtesVkVyxnKchSOHLsyM4yriqqrEWKl4bwXR\/+KyYXdcRcJlQoOjifdA+EBdskI7bixpkGeshUg4PBkYTd0xqmFMwfujo3Lt1C8M3h1nDyetfnPGqxZRdT3v6Q1isHk3X5vLYmKZ6wp9OJofVlZfXiA\/TPnd\/n2XgQp8iuZwV+lhDrA2Sjz3\/f39Zx2OlmrwMv29dRt5mozuciIewTYJs9KhsFZMpvLahx\/QFpzn+6KaM5E7lG34uQ9kc669lZj+O6v\/jV\/kE\/hixivVtBYzqGN+Vbga8DX7YH2amEWOdVDNCzVvbD4bL3jhZ8\/pNDuVzj9QSwMEFAAAAAgA9mpkXJ17Lxp3AgAAAAoAACkAHAB0ZW1wbGF0ZXMvbXlhY2NvdW50L2F1Y3Rpb24tcHVyY2hhc2VzLnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAADFVs1u2zAMvvcpiLSDU6BeigzYgMRN0Z12W4DuMmCAoUp0LMSWBElOlqGHPcSecE8yyc6P3SWxs2VYTjFFffwofqQU3atUAcOEC2R9CB7eP04fPn0I4BqenwG\/cjuG+8nFRZQOJ1Hpi4bGqc2zGL17QS2XAqaFpikxaIIbCOaZnHtryApL05BUPg7SQ0UDh+TwSiyeQB8wV3bVhyupGWrjAl\/DyMcE94sYXwDNiDF3vaWUVOY5aoohF4nsVS6l2+\/MPssCUrJA8SWwoNb0GBCxgjUh4BZzAyu0r1tZV2QGjs1kTR0zgzWeljxluI9plVVYrZtUqvjl31ijUVIYvsB6SjZFwnbflU03DWvHfZWZaslcCh3q4fZ3B+UUYUo4Oy\/uI1lwMesinhNAP\/qT\/wNIZ6kds19vFCKyT5KtXmwpoydSI6Ep7LRMDFxpuawrurWe1QIDRiwJLbcZ3vV22RFr9Un17e2PsGNd9qBnGU5UhRlzdohxYzuBVGOyZUdTWVIsdNaHGdpYoc5JxsV8L34buybLLbov7wavPOXYt3EsSI61Vj0INiBt59Fs7H\/Oag0kGE8O+jkNsr8QSueebdVKme9SxXM36WMlje3DksbKR9hkn2j5DUVl21T5\/El1HRinqN9UmLGitpP8jSICjF15ilRmUo8uh\/iOvRmOEylsuEQ+S+3o7e3tuDc5IpdGWM\/5VTTw0OfR6c\/vP\/6f9LpN4GM1OjZinPL8lHH8leTCVsZgwXFZXboucKMh2c1miyIzrE+nIF8RSmUhbFA+P7qMpsv2CcDaWv\/QMNp\/6M17qbRsCri+eRrRnPvuonIf\/qmxfbxsa\/4LUEsDBAoAAAAAAPZqZFwAAAAAAAAAAAAAAAAQABwAdGVtcGxhdGVzL2Rva2FuL1VUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAABQSwMEFAAAAAgA9mpkXCFroMb0BQAAahcAAB8AHAB0ZW1wbGF0ZXMvZG9rYW4vbXktYXVjdGlvbnMucGhwVVQJAAM\/FqhpPxaoaXV4CwABBOgDAAAE6AMAANVY63LTRhT+76fYBgfZjJ1bS9rKsT2BGEgLMU3CdDoho1lLK2vHurG7SuwCM32IPmGfpGcvsuVg2YK2FJQf8e6e237nKh310yCtecSnMfEayDp+dPHy+PKZhZro3TtEplR0arVxmIxwiOq3qTeCZT3FY+IheLqIck5EA9Wdp4PLK0sdWNfA3EcRnjbQfgvhEafxKpImstF+B6QR5shdkHawB+vE90Gmkg5cWlcb7QP9AzQnVmawxMtc4VCPA62yrt0bE+G4SdjI1ykjKWakUZP2bl0Mng8eX6J05\/QEPTkfvkBvc7KEC\/4epYoM\/TQ8PVs6iojAcBqh4Zlm7sJiR56AdnR8diKXksiZkBkcWs4kTCaCJrHDBRYZt7TgX58NzgcgQXHiTAQJA+ptI0JvawYpJM1GIeWB4R2enwzO0aPftAEng4vHev\/56YvTSylj+OTJxUD+2mqpk\/oNib2EgYVmnYNnlhroGnhCoikSAT4GzMFbzSKaN5itR\/Px8NXZZUNa1fyKQP0AJAPE7i76JaPuBEkWvlOrq\/\/LAcYIz0LBNwSZMf4GhxlBmCNtQ8vg9aAp99xY6Et8PcBp3qfnw1cvVTQWr1kGqgIR8jKLFZRX152anzCC3UDmuEYY0KhzyPK3WkSB4wpW7Z6x5HoRo7AJ+HVq72v9Xq125NEb5IaY8+6Wl0xw3PYwD0YJZl77luF0q6cEryNzk1iQWBhKRY2ZoG5I5hx3advgd1xgUEzBfu9IFlZEuOsEIgodArX1xQwdQ70CN3CrhazcJ20vE27QxvoIKm8H9XtHuyCjtiy1YPicVwPdVghuQYTNQgJGUp6GeGb7IZl2xji19w\/TaSfCbEzj9igRIonsgz3YumP3XIuRk2LPo\/HY3j9Ip0gxjLA7GTNwimffIz\/4D8mPnVHCPMLaDHs047ZUJMgUYAnpOLZdQIiwVXru6vIBzjanvxP74DuQoZa3hI4DYX+\/twcSDKBukBj3N5ZjxMKA3w2B1tLvo70cRdDwMbrlTTvQPhJm3zs8PFyoLfrxWCva7MKVysu2q+P+rX\/ge18O7jwJvc+A+oVU839h7j+Uf18O5mSaUkY+B+wDo+nfQ95sLe8pxdSHi5IoFTM5+BWmOz0s9leIT1fZfJYgYxxHMyJ2Khif9lbYQ0JOSvQKPCo0BdVG9FbhN1RlRlPilUWECAj2Vp\/pc1Z+aASsuv1LDVyFSwP\/pymgbpXy94niL\/SI8p\/Jv6QRQc+J\/08RgtMSB0m+UtceiVHizUrOlLWFyaiYBHI+SmG+g1QotSlngBnp1nXkqGo2GvnMpCR0SgWoFPxmIaeJ5JxD40y+cZVqNaOZebro9c8G1tdm4HEGMcwexLalSZq6qkV1N2MMSivcBMJurXAXh24WYkE0bWUNAiLCCSEiKpmvqBmJMI2hYVRRsqKA5E+FJF9TIuZEGAWM+N2tQuOQMZ8xeBFWUUBYBF0qnjTyGFIBvtRp8iRZhJ1+2YlxRBrNPCPwBnN3N9krL1TQeps6E064I182GjJojevuuH2uv5J4nuI473eqQwuGYw55FdlZCli4mJOltnsIbfdOYyzDxsS6MUdqqmjVZi8ummAhJHvQ3+\/fRzR2MGN4Nregha5QPvNCIUtxxnWb5m5AvCyEBbpuIcEyUt4\/y824c+1x5EFeQfV8ZlNbFueChcY3Fe8nm6q6ox4cUbfbXYD6kVZWoqxLPfPq0fDDBEO+qqyQL7jy5VVnRWvpRXnOZOUglleQ4gM8sfAbi57jmOEVYYG21\/e1Vnk6FC7RVIhXMuajvFId\/L\/++LOq3Nij\/sboWJ9AaxptrsO0zFJFIGJ114UDOar1PmxuS9movo31Fl\/Q1kXqhx8YgIPGWHlcdlNoHISVDIVzzaWnKjGNREhAqOnQSq\/WwmuNoN5Z8le3h+A9x3mTETaDegLdy3yQhajcvrctQ3C9JFlDsbCUJMvaQGxKuCWJ9YfcDQwKZ0vb6RIazqHfLUJfLuR6XV6UhsbqF5c14Vt2Bt1Rfy0yX5q0ZPPvb1BLAwQUAAAACAD2amRci7IZztEDAABGEAAAIgAcAHRlbXBsYXRlcy9kb2thbi9wcm9kdWN0LWZpZWxkcy5waHBVVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAvVdtb9MwEP6+X3GKEEmlreu2MmBrN403gYQQovuGUOUl7mItsYPjVBTYf8dvaZ2XNl03EfVDUp\/vnnse3+UyusziDCI8IxRHAfhXbyZfr64\/+tCDv38B\/yLiHC4v9kYRmUOYoDwfexG7Q\/Rgxnh6cMtZkcFdwu4EYfTArhCcRLkHuVgkeOyNdAQcxgyekXyKilDZwiX4PpyBH5E8S9DijDKKz30VzLvYA3mN4pMLuzcPp7FIkymWAN8VIozhynqZYCEIvc39ffBXMJTJgQ0kM1FOR4fS3Z5xnKAbnJgg+pnQrBAgFplEG8Y4vLthvzygKJXP09LrdIXdgzlKCrl45IFBqHcp\/twMdVwnTDOX65jkIH8IqlllnEXytjMpk86hzcc8OULVdLF7n0qferT6sXDMVqyDXHdJzQXiYppxEmKvTe2JWoevan0LiWvCNsSlRXqDeVNaFwWQaN1SxbG97ElwSFT4kRBcHgZns4HY6qLJX8io4CxREuFs7A36A3nSUkLtrcP\/oRSgfsSeUTblOMd8jmEMOM3EQmKx\/5RoVHUHs4Qh0auvjcYwWJ6unVS+aKS5ZY2tkG+qMSc\/zWpNstXyVKP1WuA0T9oXBt+s08DwECIKEWcZCAa\/MWe97epxpU29z9TEekBLtfmY0m2tXIeTy3rRqjKuV+5KrHpJVg5Da1GWPOmyhEAeTJIWaTc9uxdoFVNN7+rig4u0ypwiq14r\/6NyH9tIo4Ij\/W5qE6x8r7yzRjsqleMEh6IhzjJ0TZfV\/+t5ailNlmmsVrOT08Gg7AAmvm4Bpe99UAb2VduS+RHErOBb5GuidsI5Gg478GiL9YCGGtA288qWiIYnxx2ItMUGio6fGtKr0y6StMV6SMdPztLxi9ddNBmT9aBOIEKLJ4R0Ohi+6oBkTNZDevkYSKNDE7PRk2rjBJmBGWVEkcu54exxk0FLFm8LzjEVMNEhdu1NmXxbV5Boq2U7LJu+ihrI7syFhJhh7qZm3StXHSMWphGZORO4NinpG+UhJ5nkNZgVVCMPevBHW84Rh3L6kbNZxMIilan3fxaYLyZaDsYD\/\/uGb48ffu986cuM8hs89Td+A5SulMRLWM+fW7claHWVq30URe\/nMtBnIt9wVPLnhzGit2o6b2RbXsZdX08tfTuaSMxCfv307VS3\/NxQE4t\/vtx+bxHeL1Om\/O2Nm\/AtFu8TrG7fLD5Fgb9+DnSJ4x8UpgcQV5nAXN40HsmZ8eimrlZ24su46uRLU2Vmu8p2hcq17W1DVmXk8Xt93aRkUL9VjPteIO9lqdiT\/g9QSwMECgAAAAAA9mpkXAAAAAAAAAAAAAAAABIAHAB0ZW1wbGF0ZXMvLmdpdGtlZXBVVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAUEsDBAoAAAAAAPZqZFwAAAAAAAAAAAAAAAARABwAdGVtcGxhdGVzL2VtYWlscy9VVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAUEsDBBQAAAAIAPZqZFyIZ8D5FwEAAO4BAAAkABwAdGVtcGxhdGVzL2VtYWlscy9hdWN0aW9uLWV4cGlyZWQucGhwVVQJAAM\/FqhpPxaoaXV4CwABBOgDAAAE6AMAAH2RQWrDMBRE9z7FEFJsQ9IeIK5DQhddFtpNKcWo0k8kYktC+iYt5PCV7SRklaVGjObNqFp77TNFO2NJFcg32\/e3zcdrjhKnE+jX8CrL5j441UvGM+ZKsPjKz0L+nW6Va4Rk42yyH52TrusoSGqoE6ZtNAlFIV9gPp6X9Z54FI3dF+VFRrnK1nWWVb6uBiL4YCzvClCUjeaubZr0+qfrA156lhqbfoyEYeowe4gzaBETrzeBFI6GtesZAlG09JjS80PrDoNjqQb\/Ukz+1HNxzShwKTpRWtFRUaYlyhXWdfXkbwGvYDSBQQqLQK2JDNYmTmQ\/fyBlOHVNIuGyo7AKkXjUBSwdcea5j3qDMX3b3eV3zvHN8sPE\/1BLAwQUAAAACAD2amRc\/NaDmukBAAB8AwAAIAAcAHRlbXBsYXRlcy9lbWFpbHMvbGFzdC1jaGFuY2UucGhwVVQJAAM\/FqhpPxaoaXV4CwABBOgDAAAE6AMAAIWTz26cMBDG7zzFlGwEK4Um3VatBPtHm156qio1t6pCXntYLIzHsk3ZlXLoQ+QJ+yQ1sNs0rZQgLgxm5vt937DcmNpEAiupUaSQbG+\/ftnefUpgDvf3gAfpiyiaGUui4x6mawUzwTz7lpzKyfcimll0aH9gaazk+HjkSXk4GAkqGfeSdJjWE3FqW7QcS2yZVGWNTKBNrmA2PmfrPfqxKPU+nZ\/LMC+izTqKlma9HAAgtNe+SgEdL2vfqrIM3e9qBNaNs6AiC\/Gli6FmDiwyXqMA6R0o6tF5GPW9CnOTRlEzfJKJzvM6OzUIhlz96Z7C2ZFJn2YtpvNg2byAzXp5bV6U9rGzFvVpbA6XDn79fABfSwfh9kH4SZf00EulYE+vYRsSqFgo7jDg4PAOD0YGi18S3puycehKQ86n0PMpjoDxNLX\/EaIh7yWD2mK1iicg5DWNNJ0NTgz8Bm3LlNTNv8ZI8WhLDM4fFa5iIZ1R7JhLHT7BbKeIN4VhYog4f7MwB1i8M4dix3izt9RpkV8s8IN4uyg4KbL5RVVVhceDzwRysmygzDVpLHZkw\/JkNmxL5\/KhSUXaZz3Kfe3z9zc3RTwRjVQTzDmV4EZy2x3hM\/XPmjmgTK5cs3V0Mmr6iZ5d7IrI\/7XYwwb\/BlBLAwQKAAAAAAD2amRcAAAAAAAAAAAAAAAAFwAcAHRlbXBsYXRlcy9lbWFpbHMvcGxhaW4vVVQJAAM\/FqhpPxaoaXV4CwABBOgDAAAE6AMAAFBLAwQUAAAACAD2amRctBqMlBIBAACzAQAAKgAcAHRlbXBsYXRlcy9lbWFpbHMvcGxhaW4vYXVjdGlvbi1leHBpcmVkLnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAACFkMFOwzAQRO\/9ilFUlFQq+YFSUBEHjkhwQQRZS7xpLCW2ZW+UVurH4yTtgRNHz67nzezDk2\/9SnNjLOsC+eH5\/e3w8Zpjg8sFfDKyW63WPjg91II91pqEvvKrkH+nKdetQ7ZHhhKjV1GC8Yq6TgkdY4E192S6+8cji2qZtLHHYpPsy\/RhX9nKZsnDB2OlKZB9uiHgZZC6xSEBjLMwwj2q7C5WGVqKKZQ3gTVGI60bBIRIHZez1Ra3rAvQUs8TbfeHgJosAncmCqQ1cUH8nMHaSMqXRMatM1mNyDLrBMsjaAm2ECfv6wmmVwnyvjurxnTCIdXPR+dq1\/ccalbzKVTjXJop4ZPkW0wxnZ8M\/13G3OQXUEsDBBQAAAAIAPZqZFwd1ZU1UQEAAFUCAAAmABwAdGVtcGxhdGVzL2VtYWlscy9wbGFpbi9sYXN0LWNoYW5jZS5waHBVVAkAAz8WqGk\/FqhpdXgLAAEE6AMAAAToAwAAhZBLTsMwEIb3OcUQpUoqQQ9AKahlwxKJ7giyTDJJLBzbsqeklbrgEJyQkzBpUpUiJKKsxjP\/47u5c42LSqyUwTKDdLl6elyuH1KYwn4PuFU0j6LEeVtuCoLhW0BSSpLP6ThOX+ZR4jGgf0fhvCrwtHI27hcjLBoL8QJimEHnRCCvnJBaC5J1yCDBVip9dVsjiQZlqUydTTnNjA8WuclNzBqsZqjKIF43CJIjKGugsh7yeBLyGBoZwKMsGixBUQBtOwwEhxAXB5FLOJYarIxssfeZn7TvN96jGa+uYRLg6+MTqFEB+Cd2HmUVQae0htrOYMmUKsnDV+Q82L\/h1inGcPT9o3NXDHy4\/TnGvvjPSKvNDozt+jCjWp\/doW+lVuYt+1VKldmoMFLnEwYpndM7USlN6Nk97awtbNuiL1Ac6IvKWn4ThFtKBw\/resb\/Lg9u31BLAwQUAAAACAD2amRcZPQPC4UBAAAeAwAAJwAcAHRlbXBsYXRlcy9lbWFpbHMvcGxhaW4vYXVjdGlvbi1zb2xkLnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAACNUl9P2zAQf\/enOKJOSaXSD7CSobI98EYl9jJRZJn4klg4tuVcKGjw3TknbWFoGrPf7u735\/6cnYc2CI21cagLyNcX15v1z8sc5vD8DPhoaCXELESvh4qAXwkzrUjd5PtYfrsSs95bLUM0Fb7l32JjSfQWYXrHkhRLSYFV6yErIYMl7ILsKZoglbWSVNMXMMNOGXv6rUGSLSptXFPM2eGSAeXWbV3GHKYG9v+ATvuYQ1myyqg5h98iqbIVR3UB2S8\/RPgxUNXCmhsw3oEh7GCbfem3GbSqhztEB6mB5ci+gMMEJg9OdZgMrMQLoO3xo8J375qoaLAqsfcnwJIQhlgxN+qD0INRf9r4VEyIo8RmKvkKTPUvzBFwFU1jnLKwSSs54v4y7V01ra2ARBV8T7JDUsUHDaOL+QJyeW\/9fXLPPCrSfuMLoDik2Y\/\/nY1rHiqs6f\/039\/Vnmh\/Kozl7asQ7JOsjSWMDMx33le+6zBWKMeTkbX3nJOEj8Sekm0fktlPiye1V1BLAwQUAAAACAD2amRcX+DDyg4CAABuBQAAIQAcAHRlbXBsYXRlcy9lbWFpbHMvYXVjdGlvbi1zb2xkLnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAACtVFFr2zAQfvevuJkU25CsyUsf4jgl22B7W6B7GWMIRbrEIrIlJLnpoD9+kmWn7aDrBtGD0Z1Od9\/3yXerW13rhONetMhzyDYf7rabb18yKODxEfBBuDJJJtoo3jEHflUw4dTRH9ngy36WycQqyYk2guHT+ZOvDzFKIsR1Dgm+cJhwRShzQrUewUkpppoGDUOCDRWS1Eg5mmwKk96erQ\/oeqdoD3kxuqEok9t1kqwCIxB78LnuseXKZFBVvmaPoIAl+KgAY6XXMdaDbN0+B7SM1K6RhPirnw1SBy2e7Dv4rjoDnzrHath0PU4QDhtIr2wKNbWwQ2whEH7vUWZHqY4haMbDlRmNV7yk03OJHEZNI5uWNpgXHl1Renira70eeKC0+K+QP6r2YKjrJA31Im7QnWEeIvKI9l7Ql0wuj7jlYh98\/ikc3XnNGUppNWX+uap0nva2ppz39k0KO2X8+1bpIgXrfkms0uiZMSUl1RaX46Y8Ce7q5WI+vyobag6iXS5u9APMy3QQyJm4iQZfr6wzXpZBtrNc6OXaDj\/w3\/hHbmOOa5\/wZfaYldXqTZ1ipjGB35n\/R\/zVCE+ZStj2bXUZ4CdNjhYt0cq6HE4s9mwOAXzwkQYd\/ZOV4KHxMjLWJ9ZR44Z2n4IzXWi1C9G+840Fm0s91Gt8nw+xV4D7b\/ihxyHzxtjaK+Weja0wn34DUEsDBAoAAAAAAPZqZFwAAAAAAAAAAAAAAAAZABwAdGVtcGxhdGVzL3NpbmdsZS1wcm9kdWN0L1VUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAABQSwMEFAAAAAgA9mpkXH\/ITdwHBQAAhBgAACkAHAB0ZW1wbGF0ZXMvc2luZ2xlLXByb2R1Y3QvYXVjdGlvbi1pbmZvLnBocFVUCQADPxaoaT8WqGl1eAsAAQToAwAABOgDAADtWEtP40gQvudXlCIih1W8MLsSh5CHsgPaGQ0CNInmwiCrcXewhWNb7jYM0vz4rW53+xU7OJl9HSYXsF311aOrvip7Mo+9uEfZ2g8ZHYK1+GN5u1h9sOAYvn8H9s0X573eUZxENHWF41PA3xTMDXv2yOTd4fF574gLIlIO+jeFr5+C6En4Ufh1gaL417kMH9HMeCyVMukhlLElipsmCQuFEye+y3aiuCRw04AIlsluQ6GJxABJh4brICLiGKT5OOLC2TBBKmojsJwnbc8pqVsjEEnKFGrCOEueWe7gnqgV9TKu8DfMCdhadEqfkk7YhvihHz5ux46Xj2iKdzsMI72F0zvyCDc+y4OvRj+DUynzQOgjczYkRom7njRoETTyzCxlfAZ3YAXkgQWWvHAcrLOrj18uMXrL5MWmqXA9m2TOYfnhMzcgnCuVHO5+lMHHJOWM7oBfLFfw\/sPi+v0+VgyqscJdj9E0kLcarSxXi8+rj9d\/wvLm5noPOyXc3FQUZOG0BLS8ubrYx4KCM+DsW+wnWboawS+vLy73QWchrfguojjeAb9c3dze7mUgR0QT9+e6wGT55ZV2B4Zv7mE+Lz\/Io71X5RulCVcdgG0aJVjgRZ+dwO9np6eqXTZ+mArGC7GK4EALosZZJs+ZG4VUylfEzrAd5rNeb0L9Z1DxTPt5yDrYvkoaUCKIbWjUp9P+RDIxMNeLgHHXIUIk9XaE+aysnSWgTVOnJ9NCn6Rao18eI5QlKGKoe8JjEm6JZWdQvbTtZtvq4Z0+0fvcByj9MkV\/jZnOu3s6nRZ+wxiVml0JUNqmkejPJidSYKa9CKm\/lqYaDOUeemITFB5mlao9LBKQob6REPEaM1sB9I0DGt\/BYWRdyAoHzbY7a1\/aLpucnOAxmRMr0uSHDkkS8pqf7Uj2ms7dqMxeeqjoHBZhNJ2+InKb+jwOyGv9jFoVHCdKfJwfJKip1DL+EjtPnHE1GIfw4uajujybj2vpL+Wgqzd6a+ibtsKbbX1RXTCaSrNrDDWkjlGohat854iTZ5zhikzKabFrFs6rWrFrNoWKFo5kmEMSpSFVLGbAT+o5\/wXeKU4byxleRlbFpuAlFgpUns4bctV0MNpuQ2qL9KIroVgPi75R04LgpjGgg8Eb80J5uJ3yXWlvYIhyr7XGYtajbu2RyTrOA0maCmu30toPgj5w8RpgAb\/4VHjjxjLWB1zseeo4R\/DO1OFAkuN2Gjq3lXFIEVzTMU7KzLtvr9cZthW0sn\/O221U99KM+ipldR3B50xmLy5uSVynspGbQb0E2gV1qndzUU7ypVHZ2GDzavRXhAtwPRJicrL9iOM8Ge9MRSNuLasr9Bzy15DdeAdzvE4PxYEjuKZ4vYC1kXyxlLUSfPNMz0yloW9mifx32ldrpBnzhraswelvFEPWS+bbhd1mjrO4PxsfpLrlqd5kW301m+7\/w1t9jK3emj37kL7UlRFwlm2Z5be5rUXzn1mSzFry3+5IeeB2GAnW7kx5e71VVl9wGoFyA2iCr2TY4\/DisRCEx0B3NjwwXAT5rz\/U+\/XLv5FOG4JbyojeJsCs5n5y1E+O+vc4Sn232UVPSuFIyh36BbLQLT4\/7seA0HzbtiX0Qe+QB6+RB70ldjNXpHhPa1JTU20D+aw8H6lHsA3gaovkiWwqFd7mz05l1GGYqa939VOKW101NC+9VapdPI0bqb3+EqYf\/QVQSwMEFAAAAAgAMHFkXEZRww0UAQAAdwIAAA0AHAB1bmluc3RhbGwucGhwVVQJAAP8IKhpByGoaXV4CwABBOgDAAAE6AMAAK2QUU+DMBDH3\/kUl0XDfPATzGhm7JSIjDCW7a0p9ISGQpEW2eL23WUg02SamOhT\/5e7+\/Xyu7op09Li+CwK5GOwVz5deo63CKeuS313ee94NlzAbge4EWZiWYlUEZNw1pQ8akuOEg1SVRqhinY\/kyo7RKrRGFEkut2e\/DzFI\/qKlW5jN2d12Mvrlxqr7RhGd8QlIYFZMH+Ct49eqbTJ0bA9rB5IQOCQaYZbcJ1HAjY9ss\/t0bfMYO5DOL11CTgzIGtnES4+4VVrYrM\/Mlgdd69USQf7C6thJk6l0KY\/qylpLJFVVMcp8loip6lS2Vc7bSPOhhv0rw31mvUgqC9pwXIcHJmKFVpgYU5s\/TPeiBxVffrNO1BLAQIeAwoAAAAAAPZqZFwAAAAAAAAAAAAAAAAGABgAAAAAAAAAEAD9QQAAAABhZG1pbi9VVAUAAz8WqGl1eAsAAQQhAAAABCEAAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAADgAYAAAAAAAAAAAAtIFAAAAAYWRtaW4vLmdpdGtlZXBVVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAADAAYAAAAAAAAABAA\/UGIAAAAYWRtaW4vdmlld3MvVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgA9mpkXCUi4ZuQAwAAPhIAABgAGAAAAAAAAQAAALSBzgAAAGFkbWluL3ZpZXdzL3NldHRpbmdzLnBocFVUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAPZqZFxEGk2XvQcAAF8cAAAZABgAAAAAAAEAAAC0gbAEAABhZG1pbi92aWV3cy9kYXNoYm9hcmQucGhwVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DCgAAAAAAc39kXAAAAAAAAAAAAAAAAAkAGAAAAAAAAAAQAO1BwAwAAGluY2x1ZGVzL1VUBQADyjqoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAExjVVzEYsCIUgUAAPoTAAAYABgAAAAAAAEAAAC0gQMNAABpbmNsdWRlcy9jbGFzcy1kb2thbi5waHBVVAUAA1CImWl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACAB7Y1VcnDMaT9AGAABEIAAAHAAYAAAAAAABAAAAtIGnEgAAaW5jbHVkZXMvY2xhc3Mtd2F0Y2hsaXN0LnBocFVUBQADqoiZaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAJBjVVyAn\/lrXQMAAM4KAAAdABgAAAAAAAEAAAC0gc0ZAABpbmNsdWRlcy9jbGFzcy1teS1hY2NvdW50LnBocFVUBQADz4iZaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAIFjVVyYmLpxJgIAAJYGAAAZABgAAAAAAAEAAAC0gYEdAABpbmNsdWRlcy9jbGFzcy1lbWFpbHMucGhwVVQFAAOxiJlpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgAZH9kXGZJ7ETREQAAk1MAABgAGAAAAAAAAQAAALSB+h8AAGluY2x1ZGVzL2NsYXNzLWFkbWluLnBocFVUBQADrDqoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAI5jVVyHvOjBmgQAAOQcAAAkABgAAAAAAAEAAAC0gR0yAABpbmNsdWRlcy9jbGFzcy1lbWFpbC1kZWZpbml0aW9ucy5waHBVVAUAA8uImWl1eAsAAQToAwAABOgDAABQSwECHgMKAAAAAAAIBUtcAAAAAAAAAAAAAAAAEQAYAAAAAAAAAAAAtIEVNwAAaW5jbHVkZXMvLmdpdGtlZXBVVAUAA8+zi2l1eAsAAQToAwAABOgDAABQSwECHgMUAAAACABPkEtcyhjAcw4CAACHBAAAFwAYAAAAAAABAAAAtIFgNwAAaW5jbHVkZXMvY2xhc3MtY3Jvbi5waHBVVAUAAxaojGl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACAAqcWRcJHHCHPsDAADeCwAAHAAYAAAAAAABAAAAtIG\/OQAAaW5jbHVkZXMvY2xhc3MtaW5zdGFsbGVyLnBocFVUBQAD7yCoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAGqQS1y8aUIniQIAADcGAAAZABgAAAAAAAEAAAC0gRA+AABpbmNsdWRlcy9jbGFzcy1sb2dnZXIucGhwVVQFAANIqIxpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgAJnFkXBjFIM2aBQAAGhYAAB8AGAAAAAAAAQAAALSB7EAAAGluY2x1ZGVzL2NsYXNzLWNhcnQtaGFuZGxlci5waHBVVAUAA+ggqGl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACABCYEtcXh0YQAwCAACXCAAAHwAYAAAAAAABAAAAtIHfRgAAaW5jbHVkZXMvY2xhc3MtcHJvZHVjdC10eXBlLnBocFVUBQADnFOMaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAKFjVVx+UXf9HAYAABkhAAAhABgAAAAAAAEAAAC0gURJAABpbmNsdWRlcy9jbGFzcy1hdWN0aW9uLWVuZ2luZS5waHBVVAUAA+2ImWl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACABdf2RcpxUgkg8HAAC7GwAAHAAYAAAAAAABAAAAtIG7TwAAaW5jbHVkZXMvY2xhc3Mtb25lLWNsaWNrLnBocFVUBQADojqoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAGh\/ZFxhw8U4ggwAALY0AAAZABgAAAAAAAEAAAC0gSBXAABpbmNsdWRlcy9jbGFzcy1wbHVnaW4ucGhwVVQFAAOzOqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgAc39kXDX1Y4LoBwAAfCAAABsAGAAAAAAAAQAAALSB9WMAAGluY2x1ZGVzL2NsYXNzLXJlc3QtYXBpLnBocFVUBQADyjqoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAFB\/ZFxW7mxO1QkAAKMtAAAjABgAAAAAAAEAAAC0gTJsAABpbmNsdWRlcy9jbGFzcy1jaGVja291dC1oYW5kbGVyLnBocFVUBQADhzqoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIADqAZFyylkpFpgMAAA4JAAAaABgAAAAAAAEAAAC0gWR2AABrbG9rdGlvbi1kdXRjaC1hdWN0aW9uLnBocFVUBQADUDuoaXV4CwABBCEAAAAEIQAAAFBLAQIeAwoAAAAAAJ0ES1wAAAAAAAAAAAAAAAAHABgAAAAAAAAAEADtQV56AABhc3NldHMvVVQFAAMKs4tpdXgLAAEEIQAAAAQhAAAAUEsBAh4DCgAAAAAAT2VLXAAAAAAAAAAAAAAAAAoAGAAAAAAAAAAQAO1Bn3oAAGFzc2V0cy9qcy9VVAUAAxVdjGl1eAsAAQQhAAAABCEAAABQSwECHgMKAAAAAAAIBUtcAAAAAAAAAAAAAAAAEgAYAAAAAAAAAAAAtIHjegAAYXNzZXRzL2pzLy5naXRrZWVwVVQFAAPPs4tpdXgLAAEEIQAAAAQhAAAAUEsBAh4DFAAAAAgArmNVXLslTvxqBAAAMQ4AABsAGAAAAAAAAQAAALSBL3sAAGFzc2V0cy9qcy9rbG9rdGlvbi1hZG1pbi5qc1VUBQADB4mZaXV4CwABBCEAAAAEIQAAAFBLAQIeAxQAAAAIALxjVVzrgOjiTgoAANoqAAAeABgAAAAAAAEAAAC0ge5\/AABhc3NldHMvanMva2xva3Rpb24tZnJvbnRlbmQuanNVVAUAAySJmWl1eAsAAQQhAAAABCEAAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAACwAYAAAAAAAAABAA\/UGUigAAYXNzZXRzL2Nzcy9VVAUAAz8WqGl1eAsAAQQhAAAABCEAAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAAEwAYAAAAAAAAAAAAtIHZigAAYXNzZXRzL2Nzcy8uZ2l0a2VlcFVUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAPZqZFwmCvnaOwIAACgGAAAdABgAAAAAAAEAAAC0gSaLAABhc3NldHMvY3NzL2tsb2t0aW9uLWFkbWluLmNzc1VUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAPZqZFxgu8U0eAcAAHUgAAAgABgAAAAAAAEAAAC0gbiNAABhc3NldHMvY3NzL2tsb2t0aW9uLWZyb250ZW5kLmNzc1VUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAEaAZFwHBoN+eAIAAJcEAAANABgAAAAAAAEAAAC0gYqVAABjaGFuZ2Vsb2cudHh0VVQFAANkO6hpdXgLAAEEIQAAAAQhAAAAUEsBAh4DCgAAAAAA9mpkXAAAAAAAAAAAAAAAAAoAGAAAAAAAAAAQAP1BSZgAAHRlbXBsYXRlcy9VVAUAAz8WqGl1eAsAAQQhAAAABCEAAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAAFAAYAAAAAAAAABAA\/UGNmAAAdGVtcGxhdGVzL215YWNjb3VudC9VVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACAD2amRcwk6xoBsDAABKDAAAKQAYAAAAAAABAAAAtIHbmAAAdGVtcGxhdGVzL215YWNjb3VudC9hdWN0aW9uLXdhdGNobGlzdC5waHBVVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACAD2amRcnXsvGncCAAAACgAAKQAYAAAAAAABAAAAtIFZnAAAdGVtcGxhdGVzL215YWNjb3VudC9hdWN0aW9uLXB1cmNoYXNlcy5waHBVVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAAEAAYAAAAAAAAABAA\/UEznwAAdGVtcGxhdGVzL2Rva2FuL1VUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAPZqZFwha6DG9AUAAGoXAAAfABgAAAAAAAEAAAC0gX2fAAB0ZW1wbGF0ZXMvZG9rYW4vbXktYXVjdGlvbnMucGhwVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgA9mpkXIuyGc7RAwAARhAAACIAGAAAAAAAAQAAALSByqUAAHRlbXBsYXRlcy9kb2thbi9wcm9kdWN0LWZpZWxkcy5waHBVVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMKAAAAAAD2amRcAAAAAAAAAAAAAAAAEgAYAAAAAAAAAAAAtIH3qQAAdGVtcGxhdGVzLy5naXRrZWVwVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DCgAAAAAA9mpkXAAAAAAAAAAAAAAAABEAGAAAAAAAAAAQAP1BQ6oAAHRlbXBsYXRlcy9lbWFpbHMvVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgA9mpkXIhnwPkXAQAA7gEAACQAGAAAAAAAAQAAALSBjqoAAHRlbXBsYXRlcy9lbWFpbHMvYXVjdGlvbi1leHBpcmVkLnBocFVUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAPZqZFz81oOa6QEAAHwDAAAgABgAAAAAAAEAAAC0gQOsAAB0ZW1wbGF0ZXMvZW1haWxzL2xhc3QtY2hhbmNlLnBocFVUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAwoAAAAAAPZqZFwAAAAAAAAAAAAAAAAXABgAAAAAAAAAEAD9QUauAAB0ZW1wbGF0ZXMvZW1haWxzL3BsYWluL1VUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAxQAAAAIAPZqZFy0GoyUEgEAALMBAAAqABgAAAAAAAEAAAC0gZeuAAB0ZW1wbGF0ZXMvZW1haWxzL3BsYWluL2F1Y3Rpb24tZXhwaXJlZC5waHBVVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACAD2amRcHdWVNVEBAABVAgAAJgAYAAAAAAABAAAAtIENsAAAdGVtcGxhdGVzL2VtYWlscy9wbGFpbi9sYXN0LWNoYW5jZS5waHBVVAUAAz8WqGl1eAsAAQToAwAABOgDAABQSwECHgMUAAAACAD2amRcZPQPC4UBAAAeAwAAJwAYAAAAAAABAAAAtIG+sQAAdGVtcGxhdGVzL2VtYWlscy9wbGFpbi9hdWN0aW9uLXNvbGQucGhwVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgA9mpkXF\/gw8oOAgAAbgUAACEAGAAAAAAAAQAAALSBpLMAAHRlbXBsYXRlcy9lbWFpbHMvYXVjdGlvbi1zb2xkLnBocFVUBQADPxaoaXV4CwABBOgDAAAE6AMAAFBLAQIeAwoAAAAAAPZqZFwAAAAAAAAAAAAAAAAZABgAAAAAAAAAEAD9QQ22AAB0ZW1wbGF0ZXMvc2luZ2xlLXByb2R1Y3QvVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgA9mpkXH\/ITdwHBQAAhBgAACkAGAAAAAAAAQAAALSBYLYAAHRlbXBsYXRlcy9zaW5nbGUtcHJvZHVjdC9hdWN0aW9uLWluZm8ucGhwVVQFAAM\/FqhpdXgLAAEE6AMAAAToAwAAUEsBAh4DFAAAAAgAMHFkXEZRww0UAQAAdwIAAA0AGAAAAAAAAQAAALSByrsAAHVuaW5zdGFsbC5waHBVVAUAA\/wgqGl1eAsAAQToAwAABOgDAABQSwUGAAAAADUANQCxEwAAJb0AAAAA","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:05","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"kloktion-v3.0.1.zip","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:33","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:34","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:34","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:35","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-cart-handler.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:36","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","content":"PD9waHAKbmFtZXNwYWNlIEtsb2t0aW9uOwoKZGVmaW5lZCggJ0FCU1BBVEgnICkgfHwgZXhpdDsKCmNsYXNzIENoZWNrb3V0X0hhbmRsZXIgewoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gaW5pdCgpOiB2b2lkIHsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfY2hlY2tvdXRfcHJvY2VzcycsIFsgX19DTEFTU19fLCAndmFsaWRhdGVfY2hlY2tvdXQnIF0gKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfYWZ0ZXJfY2hlY2tvdXRfdmFsaWRhdGlvbicsIFsgX19DTEFTU19fLCAncmVsZWFzZV9sb2Nrc19vbl9lcnJvcicgXSwgMTAsIDIgKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfY2hlY2tvdXRfY3JlYXRlX29yZGVyX2xpbmVfaXRlbScsIFsgX19DTEFTU19fLCAnYWRkX29yZGVyX2l0ZW1fbWV0YScgXSwgMTAsIDQgKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfcGF5bWVudF9jb21wbGV0ZScsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfY29tcGxldGUnIF0gKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2Vfb3JkZXJfc3RhdHVzX2ZhaWxlZCcsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfZmFpbGVkJyBdICk7CiAgICAgICAgYWRkX2FjdGlvbiggJ3dvb2NvbW1lcmNlX29yZGVyX3N0YXR1c19jYW5jZWxsZWQnLCBbIF9fQ0xBU1NfXywgJ2hhbmRsZV9wYXltZW50X2ZhaWxlZCcgXSApOwogICAgICAgIGFkZF9hY3Rpb24oICd3b29jb21tZXJjZV9vcmRlcl9zdGF0dXNfY29tcGxldGVkJywgWyBfX0NMQVNTX18sICdoYW5kbGVfcGF5bWVudF9jb21wbGV0ZScgXSApOwogICAgICAgIGFkZF9hY3Rpb24oICd3b29jb21tZXJjZV9vcmRlcl9zdGF0dXNfcHJvY2Vzc2luZycsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfY29tcGxldGUnIF0gKTsKCiAgICAgICAgLy8gcHJldmVudCBkb3VibGUtc2VsbCBvbiBvcmRlci1wYXkKICAgICAgICBhZGRfYWN0aW9uKCAnYmVmb3JlX3dvb2NvbW1lcmNlX3BheScsIFsgX19DTEFTU19fLCAndmFsaWRhdGVfb3JkZXJfcGF5JyBdICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBhY3F1aXJlX2xvY2soIGludCAkcHJvZHVjdF9pZCwgaW50ICR1c2VyX2lkICk6IGJvb2wgewogICAgICAgIGdsb2JhbCAkd3BkYjsKCiAgICAgICAgJGFmZmVjdGVkID0gJHdwZGItPnF1ZXJ5KAogICAgICAgICAgICAkd3BkYi0+cHJlcGFyZSgKICAgICAgICAgICAgICAgICJVUERBVEUgeyR3cGRiLT5wb3N0bWV0YX0KICAgICAgICAgICAgICAgICBTRVQgbWV0YV92YWx1ZSA9ICdwcm9jZXNzaW5nJwogICAgICAgICAgICAgICAgIFdIRVJFIHBvc3RfaWQgPSAlZAogICAgICAgICAgICAgICAgICAgQU5EIG1ldGFfa2V5ID0gJ19rbG9rdGlvbl9zdGF0dXMnCiAgICAgICAgICAgICAgICAgICBBTkQgbWV0YV92YWx1ZSBJTiAoJ2FjdGl2ZScsICdwYXVzZWQnKSIsCiAgICAgICAgICAgICAgICAkcHJvZHVjdF9pZAogICAgICAgICAgICApCiAgICAgICAgKTsKCiAgICAgICAgaWYgKCAxID09PSAkYWZmZWN0ZWQgKSB7CiAgICAgICAgICAgIC8vIEZsdXNoIFdQIG9iamVjdCBjYWNoZSBhZnRlciBkaXJlY3QgU1FMIHNvIGdldF9wb3N0X21ldGEgcmVhZHMgZnJlc2ggZGF0YS4KICAgICAgICAgICAgd3BfY2FjaGVfZGVsZXRlKCAkcHJvZHVjdF9pZCwgJ3Bvc3RfbWV0YScgKTsKCiAgICAgICAgICAgIHVwZGF0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicsICR1c2VyX2lkICk7CiAgICAgICAgICAgIHVwZGF0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3Npbmdfc2luY2UnLCB0aW1lKCkgKTsKCiAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2xvY2tfYWNxdWlyZWQnLCBBdWN0aW9uX0VuZ2luZTo6Y2FsY3VsYXRlX3ByaWNlKCAkcHJvZHVjdF9pZCApLCAkdXNlcl9pZCApOwogICAgICAgICAgICBkZWxldGVfdHJhbnNpZW50KCAna2xva3Rpb25fYXBpXycgLiAkcHJvZHVjdF9pZCApOwoKICAgICAgICAgICAgcmV0dXJuIHRydWU7CiAgICAgICAgfQoKICAgICAgICByZXR1cm4gZmFsc2U7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiByZWxlYXNlX2xvY2soIGludCAkcHJvZHVjdF9pZCApOiB2b2lkIHsKICAgICAgICAkcmVzZXJ2ZSA9IChmbG9hdCkgZ2V0X3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fcmVzZXJ2ZV9wcmljZScsIHRydWUgKTsKICAgICAgICAkcHJpY2UgICA9IEF1Y3Rpb25fRW5naW5lOjpjYWxjdWxhdGVfcHJpY2UoICRwcm9kdWN0X2lkICk7CgogICAgICAgIC8vIERldGVybWluZSB3aGF0IHN0YXR1cyB0byByZXN0b3JlLgogICAgICAgICRyZXN0b3JlID0gKCAkcHJpY2UgPD0gJHJlc2VydmUgKSA\/ICdwYXVzZWQnIDogJ2FjdGl2ZSc7CgogICAgICAgIC8vIERpcmVjdCB1cGRhdGUgdG8gYnlwYXNzIHRyYW5zaXRpb24gdmFsaWRhdGlvbiAocHJvY2Vzc2luZyDihpIgYWN0aXZlL3BhdXNlZCkuCiAgICAgICAgdXBkYXRlX3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fc3RhdHVzJywgJHJlc3RvcmUgKTsKCiAgICAgICAgaWYgKCAncGF1c2VkJyA9PT0gJHJlc3RvcmUgJiYgISBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wYXVzZV9zdGFydCcsIHRydWUgKSApIHsKICAgICAgICAgICAgdXBkYXRlX3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fcGF1c2Vfc3RhcnQnLCB0aW1lKCkgKTsKICAgICAgICB9CgogICAgICAgIGRlbGV0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicgKTsKICAgICAgICBkZWxldGVfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3NpbmNlJyApOwoKICAgICAgICBMb2dnZXI6OmxvZyggJHByb2R1Y3RfaWQsICdsb2NrX3JlbGVhc2VkJywgJHByaWNlICk7CiAgICAgICAgZGVsZXRlX3RyYW5zaWVudCggJ2tsb2t0aW9uX2FwaV8nIC4gJHByb2R1Y3RfaWQgKTsKICAgIH0KCiAgICAvLyBhY3F1aXJlIGxvY2tzOyByZWxlYXNlIGFsbCBvbiBmYWlsdXJlCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHZhbGlkYXRlX2NoZWNrb3V0KCk6IHZvaWQgewogICAgICAgIGlmICggISBXQygpLT5jYXJ0ICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICAkdXNlcl9pZCAgICAgID0gZ2V0X2N1cnJlbnRfdXNlcl9pZCgpOwogICAgICAgICRsb2NrZWRfaWRzICAgPSBbXTsKCiAgICAgICAgZm9yZWFjaCAoIFdDKCktPmNhcnQtPmdldF9jYXJ0KCkgYXMgJGtleSA9PiAkaXRlbSApIHsKICAgICAgICAgICAgaWYgKCAhIGlzc2V0KCAkaXRlbVsna2xva3Rpb25fcHJvZHVjdF9pZCddICkgKSB7CiAgICAgICAgICAgICAgICBjb250aW51ZTsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbVsna2xva3Rpb25fcHJvZHVjdF9pZCddOwoKICAgICAgICAgICAgaWYgKCAhIHNlbGY6OmFjcXVpcmVfbG9jayggJHByb2R1Y3RfaWQsICR1c2VyX2lkID86IDAgKSApIHsKICAgICAgICAgICAgICAgIGZvcmVhY2ggKCAkbG9ja2VkX2lkcyBhcyAkbG9ja2VkX2lkICkgewogICAgICAgICAgICAgICAgICAgIHNlbGY6OnJlbGVhc2VfbG9jayggJGxvY2tlZF9pZCApOwogICAgICAgICAgICAgICAgfQoKICAgICAgICAgICAgICAgIHRocm93IG5ldyBcRXhjZXB0aW9uKAogICAgICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgICAgIF9fKCAnU29ycnksIHRoZSBhdWN0aW9uIGZvciAiJXMiIGhhcyBhbHJlYWR5IGJlZW4gcHVyY2hhc2VkIGJ5IGFub3RoZXIgYnV5ZXIuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICksCiAgICAgICAgICAgICAgICAgICAgICAgIGdldF90aGVfdGl0bGUoICRwcm9kdWN0X2lkICkKICAgICAgICAgICAgICAgICAgICApCiAgICAgICAgICAgICAgICApOwogICAgICAgICAgICB9CgogICAgICAgICAgICAkbG9ja2VkX2lkc1tdID0gJHByb2R1Y3RfaWQ7CiAgICAgICAgfQogICAgfQoKICAgIC8qKgogICAgICogUmVsZWFzZSBhbnkgYXVjdGlvbiBsb2NrcyBpZiBXQyBjaGVja291dCB2YWxpZGF0aW9uIHByb2R1Y2VkIGVycm9ycy4KICAgICAqIFByZXZlbnRzIG9ycGhhbmVkIGxvY2tzIHdoZW4gYSByZXF1aXJlZCBmaWVsZCBpcyBtaXNzaW5nLgogICAgICovCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHJlbGVhc2VfbG9ja3Nfb25fZXJyb3IoIGFycmF5ICRkYXRhLCBcV1BfRXJyb3IgJGVycm9ycyApOiB2b2lkIHsKICAgICAgICBpZiAoICEgJGVycm9ycy0+aGFzX2Vycm9ycygpIHx8ICEgV0MoKS0+Y2FydCApIHsKICAgICAgICAgICAgcmV0dXJuOwogICAgICAgIH0KCiAgICAgICAgZm9yZWFjaCAoIFdDKCktPmNhcnQtPmdldF9jYXJ0KCkgYXMgJGl0ZW0gKSB7CiAgICAgICAgICAgIGlmICggISBpc3NldCggJGl0ZW1bJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXSApICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRwcm9kdWN0X2lkID0gKGludCkgJGl0ZW1bJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXTsKICAgICAgICAgICAgJHN0YXR1cyAgICAgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgIGlmICggJ3Byb2Nlc3NpbmcnID09PSAkc3RhdHVzICkgewogICAgICAgICAgICAgICAgJGxvY2tfb3duZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICAgICBpZiAoICRsb2NrX293bmVyID09PSBnZXRfY3VycmVudF91c2VyX2lkKCkgKSB7CiAgICAgICAgICAgICAgICAgICAgc2VsZjo6cmVsZWFzZV9sb2NrKCAkcHJvZHVjdF9pZCApOwogICAgICAgICAgICAgICAgfQogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gdmFsaWRhdGVfb3JkZXJfcGF5KCk6IHZvaWQgewogICAgICAgIGdsb2JhbCAkd3A7CgogICAgICAgICRvcmRlcl9pZCA9IGFic2ludCggJHdwLT5xdWVyeV92YXJzWydvcmRlci1wYXknXSA\/PyAwICk7CiAgICAgICAgaWYgKCAhICRvcmRlcl9pZCApIHsKICAgICAgICAgICAgcmV0dXJuOwogICAgICAgIH0KCiAgICAgICAgJG9yZGVyID0gd2NfZ2V0X29yZGVyKCAkb3JkZXJfaWQgKTsKICAgICAgICBpZiAoICEgJG9yZGVyICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgICRwcm9jZXNzaW5nX3VzZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICRjdXJyZW50X3VzZXIgICAgPSBnZXRfY3VycmVudF91c2VyX2lkKCk7CgogICAgICAgICAgICBpZiAoIGluX2FycmF5KCAkc3RhdHVzLCBbICdzb2xkJywgJ2V4cGlyZWQnLCAnc3RvcHBlZCcgXSwgdHJ1ZSApICkgewogICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKCAnY2FuY2VsbGVkJywgX18oICdBdWN0aW9uIGlzIG5vIGxvbmdlciBhdmFpbGFibGUuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICkgKTsKICAgICAgICAgICAgICAgIHdjX2FkZF9ub3RpY2UoIF9fKCAnVGhpcyBhdWN0aW9uIGhhcyBhbHJlYWR5IGVuZGVkLiBZb3VyIG9yZGVyIGhhcyBiZWVuIGNhbmNlbGxlZC4nLCAna2xva3Rpb24tZHV0Y2gtYXVjdGlvbicgKSwgJ2Vycm9yJyApOwogICAgICAgICAgICAgICAgd3Bfc2FmZV9yZWRpcmVjdCggd2NfZ2V0X2FjY291bnRfZW5kcG9pbnRfdXJsKCAnb3JkZXJzJyApICk7CiAgICAgICAgICAgICAgICBleGl0OwogICAgICAgICAgICB9CgogICAgICAgICAgICAvLyBCbG9jayBwYXltZW50IHVubGVzcyB0aGlzIHVzZXIgY3VycmVudGx5IGhvbGRzIHRoZSBwcm9jZXNzaW5nIGxvY2suCiAgICAgICAgICAgIC8vIENvdmVyczogbG9jayBleHBpcmVkIGFuZCBhdWN0aW9uIHJldHVybmVkIHRvIGFjdGl2ZS9wYXVzZWQsIG9yIGFub3RoZXIgdXNlciBob2xkcyBpdC4KICAgICAgICAgICAgaWYgKCAncHJvY2Vzc2luZycgIT09ICRzdGF0dXMgfHwgJHByb2Nlc3NpbmdfdXNlciAhPT0gJGN1cnJlbnRfdXNlciApIHsKICAgICAgICAgICAgICAgICRvcmRlci0+dXBkYXRlX3N0YXR1cyggJ2NhbmNlbGxlZCcsIF9fKCAnWW91ciBwcmljZSBsb2NrIGhhcyBleHBpcmVkLiBPcmRlciBjYW5jZWxsZWQuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICkgKTsKICAgICAgICAgICAgICAgIHdjX2FkZF9ub3RpY2UoIF9fKCAnWW91ciBwcmljZSBsb2NrIGhhcyBleHBpcmVkLiBQbGVhc2UgYWRkIHRoZSBpdGVtIHRvIHlvdXIgY2FydCBhZ2Fpbi4nLCAna2xva3Rpb24tZHV0Y2gtYXVjdGlvbicgKSwgJ2Vycm9yJyApOwogICAgICAgICAgICAgICAgd3Bfc2FmZV9yZWRpcmVjdCggd2NfZ2V0X2FjY291bnRfZW5kcG9pbnRfdXJsKCAnb3JkZXJzJyApICk7CiAgICAgICAgICAgICAgICBleGl0OwogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gYWRkX29yZGVyX2l0ZW1fbWV0YSggJGl0ZW0sICRjYXJ0X2l0ZW1fa2V5LCAkdmFsdWVzLCAkb3JkZXIgKTogdm9pZCB7CiAgICAgICAgaWYgKCAhIGlzc2V0KCAkdmFsdWVzWydrbG9rdGlvbl9mcm96ZW5fcHJpY2UnXSApICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICAkc3RhcnRfcHJpY2UgPSAoZmxvYXQpIGdldF9wb3N0X21ldGEoICR2YWx1ZXNbJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXSwgJ19rbG9rdGlvbl9zdGFydF9wcmljZScsIHRydWUgKTsKICAgICAgICAkZnJvemVuICAgICAgPSAoZmxvYXQpICR2YWx1ZXNbJ2tsb2t0aW9uX2Zyb3plbl9wcmljZSddOwogICAgICAgICRzYXZpbmdzICAgICA9ICRzdGFydF9wcmljZSAtICRmcm96ZW47CiAgICAgICAgJHBjdCAgICAgICAgID0gJHN0YXJ0X3ByaWNlID4gMCA\/IHJvdW5kKCAoICRzYXZpbmdzIC8gJHN0YXJ0X3ByaWNlICkgKiAxMDAsIDEgKSA6IDA7CgogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX2Zyb3plbl9wcmljZScsICRmcm96ZW4gKTsKICAgICAgICAkaXRlbS0+YWRkX21ldGFfZGF0YSggJ19rbG9rdGlvbl9zdGFydF9wcmljZScsICRzdGFydF9wcmljZSApOwogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhdmluZ3MnLCAkc2F2aW5ncyApOwogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhdmluZ3NfcGVyY2VudCcsICRwY3QgKTsKICAgICAgICAkaXRlbS0+YWRkX21ldGFfZGF0YSggJ19rbG9rdGlvbl9wcm9kdWN0X2lkJywgKGludCkgJHZhbHVlc1sna2xva3Rpb25fcHJvZHVjdF9pZCddICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBoYW5kbGVfcGF5bWVudF9jb21wbGV0ZSggaW50ICRvcmRlcl9pZCApOiB2b2lkIHsKICAgICAgICAkb3JkZXIgPSB3Y19nZXRfb3JkZXIoICRvcmRlcl9pZCApOwogICAgICAgIGlmICggISAkb3JkZXIgKSB7CiAgICAgICAgICAgIHJldHVybjsKICAgICAgICB9CgogICAgICAgIC8vIGFscmVhZHkgcHJvY2Vzc2VkCiAgICAgICAgaWYgKCAkb3JkZXItPmdldF9tZXRhKCAnX2tsb2t0aW9uX3NhbGVfZmluYWxpemVkJyApICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgIGlmICggISBpbl9hcnJheSggJHN0YXR1cywgWyAncHJvY2Vzc2luZycsICdhY3RpdmUnLCAncGF1c2VkJyBdLCB0cnVlICkgKSB7CiAgICAgICAgICAgICAgICAkb3JkZXItPnVwZGF0ZV9zdGF0dXMoCiAgICAgICAgICAgICAgICAgICAgJ2NhbmNlbGxlZCcsCiAgICAgICAgICAgICAgICAgICAgc3ByaW50ZigKICAgICAgICAgICAgICAgICAgICAgICAgX18oICdBdWN0aW9uICIlcyIgaXMgbm8gbG9uZ2VyIGF2YWlsYWJsZSAoc3RhdHVzOiAlcykuIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgICAgICBnZXRfdGhlX3RpdGxlKCAkcHJvZHVjdF9pZCApLAogICAgICAgICAgICAgICAgICAgICAgICAkc3RhdHVzCiAgICAgICAgICAgICAgICAgICAgKQogICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2RvdWJsZV9zZWxsX2Jsb2NrZWQnLCBudWxsLCAkb3JkZXItPmdldF9jdXN0b21lcl9pZCgpLCBbCiAgICAgICAgICAgICAgICAgICAgJ29yZGVyX2lkJyAgICAgICA9PiAkb3JkZXJfaWQsCiAgICAgICAgICAgICAgICAgICAgJ2F1Y3Rpb25fc3RhdHVzJyA9PiAkc3RhdHVzLAogICAgICAgICAgICAgICAgXSApOwogICAgICAgICAgICAgICAgcmV0dXJuOwogICAgICAgICAgICB9CgogICAgICAgICAgICBpZiAoICdwcm9jZXNzaW5nJyA9PT0gJHN0YXR1cyApIHsKICAgICAgICAgICAgICAgICRwcm9jZXNzaW5nX3VzZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICAgICAkYnV5ZXJfaWQgICAgICAgID0gJG9yZGVyLT5nZXRfY3VzdG9tZXJfaWQoKTsKICAgICAgICAgICAgICAgIGlmICggJHByb2Nlc3NpbmdfdXNlciAmJiAkcHJvY2Vzc2luZ191c2VyICE9PSAkYnV5ZXJfaWQgKSB7CiAgICAgICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKAogICAgICAgICAgICAgICAgICAgICAgICAnY2FuY2VsbGVkJywKICAgICAgICAgICAgICAgICAgICAgICAgX18oICdBbm90aGVyIGJ1eWVyIGhvbGRzIHRoZSBsb2NrIGZvciB0aGlzIGF1Y3Rpb24uIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApCiAgICAgICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRmcm96ZW4gPSAoZmxvYXQpICRpdGVtLT5nZXRfbWV0YSggJ19rbG9rdGlvbl9mcm96ZW5fcHJpY2UnICk7CiAgICAgICAgICAgICRzdGFydCAgPSAoZmxvYXQpICRpdGVtLT5nZXRfbWV0YSggJ19rbG9rdGlvbl9zdGFydF9wcmljZScgKTsKICAgICAgICAgICAgJHBjdCAgICA9IChmbG9hdCkgJGl0ZW0tPmdldF9tZXRhKCAnX2tsb2t0aW9uX3NhdmluZ3NfcGVyY2VudCcgKTsKCiAgICAgICAgICAgICRidXllcl9pZCA9ICRvcmRlci0+Z2V0X2N1c3RvbWVyX2lkKCk7CiAgICAgICAgICAgICRzb2xkID0gQXVjdGlvbl9FbmdpbmU6OnNlbGxfYXVjdGlvbiggJHByb2R1Y3RfaWQsICRidXllcl9pZCwgJGZyb3plbiApOwoKICAgICAgICAgICAgaWYgKCAhICRzb2xkICkgewogICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKAogICAgICAgICAgICAgICAgICAgICdjYW5jZWxsZWQnLAogICAgICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgICAgIF9fKCAnQXVjdGlvbiAiJXMiIGNvdWxkIG5vdCBiZSBmaW5hbGl6ZWQgKGFscmVhZHkgc29sZCBvciBlbmRlZCkuIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgICAgICBnZXRfdGhlX3RpdGxlKCAkcHJvZHVjdF9pZCApCiAgICAgICAgICAgICAgICAgICAgKQogICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2RvdWJsZV9zZWxsX2Jsb2NrZWQnLCAkZnJvemVuLCAkYnV5ZXJfaWQsIFsKICAgICAgICAgICAgICAgICAgICAnb3JkZXJfaWQnID0+ICRvcmRlcl9pZCwKICAgICAgICAgICAgICAgICAgICAncmVhc29uJyAgID0+ICdzZWxsX2F1Y3Rpb25fZmFpbGVkJywKICAgICAgICAgICAgICAgIF0gKTsKICAgICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgJG9yZGVyLT5hZGRfb3JkZXJfbm90ZSgKICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgX18oICdEdXRjaCBBdWN0aW9uIHB1cmNoYXNlOiAlcyBhdCAlcyAoc3RhcnRlZCBhdCAlcywgc2F2aW5ncyAlcyUlKScsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgIGdldF90aGVfdGl0bGUoICRwcm9kdWN0X2lkICksCiAgICAgICAgICAgICAgICAgICAgd2NfcHJpY2UoICRmcm96ZW4gKSwKICAgICAgICAgICAgICAgICAgICB3Y19wcmljZSggJHN0YXJ0ICksCiAgICAgICAgICAgICAgICAgICAgJHBjdAogICAgICAgICAgICAgICAgKQogICAgICAgICAgICApOwogICAgICAgIH0KCiAgICAgICAgJG9yZGVyLT51cGRhdGVfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhbGVfZmluYWxpemVkJywgdGltZSgpICk7CiAgICAgICAgJG9yZGVyLT5zYXZlKCk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBoYW5kbGVfcGF5bWVudF9mYWlsZWQoIGludCAkb3JkZXJfaWQgKTogdm9pZCB7CiAgICAgICAgJG9yZGVyID0gd2NfZ2V0X29yZGVyKCAkb3JkZXJfaWQgKTsKICAgICAgICBpZiAoICEgJG9yZGVyICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKICAgICAgICAgICAgaWYgKCAncHJvY2Vzc2luZycgPT09ICRzdGF0dXMgKSB7CiAgICAgICAgICAgICAgICBzZWxmOjpyZWxlYXNlX2xvY2soICRwcm9kdWN0X2lkICk7CiAgICAgICAgICAgIH0KICAgICAgICB9CiAgICB9Cgp9Cg==","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:36","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-installer.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:37","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:38","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-plugin.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:39","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-rest-api.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:39","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/uninstall.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"PSAzLjAuMSAtIDIwMjYtMDMtMDQgPQoqIEZpeDogV1Agb2JqZWN0IGNhY2hlIGRlc3luYyBhZnRlciBhdG9taWMgbG9jayBhY3F1aXNpdGlvbgoqIEZpeDogT3JwaGFuZWQgYXVjdGlvbiBsb2NrcyB3aGVuIFdDIGNoZWNrb3V0IHZhbGlkYXRpb24gZmFpbHMKKiBGaXg6IFBlbmRpbmcgb3JkZXIgZXhwbG9pdCAtIHZhbGlkYXRlIGxvY2sgaG9sZGVyIG9uIG9yZGVyLXBheSBwYWdlCiogRml4OiBPbmUtY2xpY2sgYnV5IGNhdGNoZXMgXFRocm93YWJsZSB0byBwcmV2ZW50IG9ycGhhbmVkIGxvY2tzCiogRml4OiBPbmUtY2xpY2sgYnV5IHZhbGlkYXRlcyBhZGRfcHJvZHVjdCByZXN1bHQgYmVmb3JlIHByb2NlZWRpbmcKKiBGaXg6IE9uZS1jbGljayBidXkgY2FsY3VsYXRlcyBzaGlwcGluZyBmb3IgcGh5c2ljYWwgcHJvZHVjdHMKKiBGaXg6IEp1c3RpY2UgZGVsZXRlIHZlcmlmaWVzIHByb2R1Y3QgaXMgZHV0Y2hfYXVjdGlvbiB0eXBlCiogRml4OiBQYXltZW50IGhvb2tzIG5vdyBsb2FkIG9uIGFkbWluIHRvbyAobWFudWFsIG9yZGVyIHN0YXR1cyBjaGFuZ2VzKQoqIEZpeDogUkVTVCBBUEkgY2hlY2tzIHB1Ymxpc2ggc3RhdHVzIHRvIHByZXZlbnQgZGF0YSBkaXNjbG9zdXJlCgo9IDMuMC4wIC0gMjAyNi0wMy0wNCA9CiogSW5pdGlhbCByZWxlYXNlCiogQ29yZSBEdXRjaCBBdWN0aW9uIGVuZ2luZSB3aXRoIGxpbmVhciBwcmljZSBkZWNheQoqIERva2FuIHZlbmRvciBpbnRlZ3JhdGlvbgoqIFN0cmlwZSBvbmUtY2xpY2sgcHVyY2hhc2Ugd2l0aCByYWNlIGNvbmRpdGlvbiBoYW5kbGluZwoqIFdhdGNobGlzdCB3aXRoIHByaWNlIGFsZXJ0cwoqIEFkbWluIEp1c3RpY2UgQnV0dG9uIGFuZCBHbG9iYWwgUGF1c2UKKiBXb29Db21tZXJjZSBlbWFpbCBub3RpZmljYXRpb25zIChhdWN0aW9uIHNvbGQsIGV4cGlyZWQsIGxhc3QgY2hhbmNlKQoqIEVsZW1lbnRvciBjb21wYXRpYmxlIHZpYSBba2xva3Rpb25fYXVjdGlvbl0gc2hvcnRjb2RlCiogTXkgQWNjb3VudCB0YWJzIGZvciBhdWN0aW9uIHB1cmNoYXNlcyBhbmQgd2F0Y2hsaXN0CiogUmVzZXJ2ZSBwcmljZSBzdXBwb3J0IChvcHRpb25hbCkKKiBMaXZlIHB1bHNlIGluZGljYXRvciBmb3IgYWN0aXZlIGF1Y3Rpb25zCiogSGVhcnQvZmF2b3JpdGUgaWNvbiBvbiBzaG9wIGFuZCBzaW5nbGUgcHJvZHVjdCBwYWdlcwo=","base64":true},"result":null}
{"timestamp":"2026-03-04 14:04:52","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:00","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:00","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-cart-handler.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:01","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","content":"PD9waHAKbmFtZXNwYWNlIEtsb2t0aW9uOwoKZGVmaW5lZCggJ0FCU1BBVEgnICkgfHwgZXhpdDsKCmNsYXNzIENoZWNrb3V0X0hhbmRsZXIgewoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gaW5pdCgpOiB2b2lkIHsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfY2hlY2tvdXRfcHJvY2VzcycsIFsgX19DTEFTU19fLCAndmFsaWRhdGVfY2hlY2tvdXQnIF0gKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfYWZ0ZXJfY2hlY2tvdXRfdmFsaWRhdGlvbicsIFsgX19DTEFTU19fLCAncmVsZWFzZV9sb2Nrc19vbl9lcnJvcicgXSwgMTAsIDIgKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfY2hlY2tvdXRfY3JlYXRlX29yZGVyX2xpbmVfaXRlbScsIFsgX19DTEFTU19fLCAnYWRkX29yZGVyX2l0ZW1fbWV0YScgXSwgMTAsIDQgKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfcGF5bWVudF9jb21wbGV0ZScsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfY29tcGxldGUnIF0gKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2Vfb3JkZXJfc3RhdHVzX2ZhaWxlZCcsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfZmFpbGVkJyBdICk7CiAgICAgICAgYWRkX2FjdGlvbiggJ3dvb2NvbW1lcmNlX29yZGVyX3N0YXR1c19jYW5jZWxsZWQnLCBbIF9fQ0xBU1NfXywgJ2hhbmRsZV9wYXltZW50X2ZhaWxlZCcgXSApOwogICAgICAgIGFkZF9hY3Rpb24oICd3b29jb21tZXJjZV9vcmRlcl9zdGF0dXNfY29tcGxldGVkJywgWyBfX0NMQVNTX18sICdoYW5kbGVfcGF5bWVudF9jb21wbGV0ZScgXSApOwogICAgICAgIGFkZF9hY3Rpb24oICd3b29jb21tZXJjZV9vcmRlcl9zdGF0dXNfcHJvY2Vzc2luZycsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfY29tcGxldGUnIF0gKTsKCiAgICAgICAgLy8gcHJldmVudCBkb3VibGUtc2VsbCBvbiBvcmRlci1wYXkKICAgICAgICBhZGRfYWN0aW9uKCAnYmVmb3JlX3dvb2NvbW1lcmNlX3BheScsIFsgX19DTEFTU19fLCAndmFsaWRhdGVfb3JkZXJfcGF5JyBdICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBhY3F1aXJlX2xvY2soIGludCAkcHJvZHVjdF9pZCwgaW50ICR1c2VyX2lkICk6IGJvb2wgewogICAgICAgIGdsb2JhbCAkd3BkYjsKCiAgICAgICAgJGFmZmVjdGVkID0gJHdwZGItPnF1ZXJ5KAogICAgICAgICAgICAkd3BkYi0+cHJlcGFyZSgKICAgICAgICAgICAgICAgICJVUERBVEUgeyR3cGRiLT5wb3N0bWV0YX0KICAgICAgICAgICAgICAgICBTRVQgbWV0YV92YWx1ZSA9ICdwcm9jZXNzaW5nJwogICAgICAgICAgICAgICAgIFdIRVJFIHBvc3RfaWQgPSAlZAogICAgICAgICAgICAgICAgICAgQU5EIG1ldGFfa2V5ID0gJ19rbG9rdGlvbl9zdGF0dXMnCiAgICAgICAgICAgICAgICAgICBBTkQgbWV0YV92YWx1ZSBJTiAoJ2FjdGl2ZScsICdwYXVzZWQnKSIsCiAgICAgICAgICAgICAgICAkcHJvZHVjdF9pZAogICAgICAgICAgICApCiAgICAgICAgKTsKCiAgICAgICAgaWYgKCAxID09PSAkYWZmZWN0ZWQgKSB7CiAgICAgICAgICAgIC8vIEZsdXNoIFdQIG9iamVjdCBjYWNoZSBhZnRlciBkaXJlY3QgU1FMIHNvIGdldF9wb3N0X21ldGEgcmVhZHMgZnJlc2ggZGF0YS4KICAgICAgICAgICAgd3BfY2FjaGVfZGVsZXRlKCAkcHJvZHVjdF9pZCwgJ3Bvc3RfbWV0YScgKTsKCiAgICAgICAgICAgIHVwZGF0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicsICR1c2VyX2lkICk7CiAgICAgICAgICAgIHVwZGF0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3Npbmdfc2luY2UnLCB0aW1lKCkgKTsKCiAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2xvY2tfYWNxdWlyZWQnLCBBdWN0aW9uX0VuZ2luZTo6Y2FsY3VsYXRlX3ByaWNlKCAkcHJvZHVjdF9pZCApLCAkdXNlcl9pZCApOwogICAgICAgICAgICBkZWxldGVfdHJhbnNpZW50KCAna2xva3Rpb25fYXBpXycgLiAkcHJvZHVjdF9pZCApOwoKICAgICAgICAgICAgcmV0dXJuIHRydWU7CiAgICAgICAgfQoKICAgICAgICByZXR1cm4gZmFsc2U7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiByZWxlYXNlX2xvY2soIGludCAkcHJvZHVjdF9pZCApOiB2b2lkIHsKICAgICAgICAkcmVzZXJ2ZSA9IChmbG9hdCkgZ2V0X3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fcmVzZXJ2ZV9wcmljZScsIHRydWUgKTsKICAgICAgICAkcHJpY2UgICA9IEF1Y3Rpb25fRW5naW5lOjpjYWxjdWxhdGVfcHJpY2UoICRwcm9kdWN0X2lkICk7CgogICAgICAgIC8vIERldGVybWluZSB3aGF0IHN0YXR1cyB0byByZXN0b3JlLgogICAgICAgICRyZXN0b3JlID0gKCAkcHJpY2UgPD0gJHJlc2VydmUgKSA\/ICdwYXVzZWQnIDogJ2FjdGl2ZSc7CgogICAgICAgIC8vIERpcmVjdCB1cGRhdGUgdG8gYnlwYXNzIHRyYW5zaXRpb24gdmFsaWRhdGlvbiAocHJvY2Vzc2luZyDihpIgYWN0aXZlL3BhdXNlZCkuCiAgICAgICAgdXBkYXRlX3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fc3RhdHVzJywgJHJlc3RvcmUgKTsKCiAgICAgICAgaWYgKCAncGF1c2VkJyA9PT0gJHJlc3RvcmUgJiYgISBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wYXVzZV9zdGFydCcsIHRydWUgKSApIHsKICAgICAgICAgICAgdXBkYXRlX3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fcGF1c2Vfc3RhcnQnLCB0aW1lKCkgKTsKICAgICAgICB9CgogICAgICAgIGRlbGV0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicgKTsKICAgICAgICBkZWxldGVfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3NpbmNlJyApOwoKICAgICAgICBMb2dnZXI6OmxvZyggJHByb2R1Y3RfaWQsICdsb2NrX3JlbGVhc2VkJywgJHByaWNlICk7CiAgICAgICAgZGVsZXRlX3RyYW5zaWVudCggJ2tsb2t0aW9uX2FwaV8nIC4gJHByb2R1Y3RfaWQgKTsKICAgIH0KCiAgICAvLyBhY3F1aXJlIGxvY2tzOyByZWxlYXNlIGFsbCBvbiBmYWlsdXJlCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHZhbGlkYXRlX2NoZWNrb3V0KCk6IHZvaWQgewogICAgICAgIGlmICggISBXQygpLT5jYXJ0ICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICAkdXNlcl9pZCAgICAgID0gZ2V0X2N1cnJlbnRfdXNlcl9pZCgpOwogICAgICAgICRsb2NrZWRfaWRzICAgPSBbXTsKCiAgICAgICAgZm9yZWFjaCAoIFdDKCktPmNhcnQtPmdldF9jYXJ0KCkgYXMgJGtleSA9PiAkaXRlbSApIHsKICAgICAgICAgICAgaWYgKCAhIGlzc2V0KCAkaXRlbVsna2xva3Rpb25fcHJvZHVjdF9pZCddICkgKSB7CiAgICAgICAgICAgICAgICBjb250aW51ZTsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbVsna2xva3Rpb25fcHJvZHVjdF9pZCddOwoKICAgICAgICAgICAgaWYgKCAhIHNlbGY6OmFjcXVpcmVfbG9jayggJHByb2R1Y3RfaWQsICR1c2VyX2lkID86IDAgKSApIHsKICAgICAgICAgICAgICAgIGZvcmVhY2ggKCAkbG9ja2VkX2lkcyBhcyAkbG9ja2VkX2lkICkgewogICAgICAgICAgICAgICAgICAgIHNlbGY6OnJlbGVhc2VfbG9jayggJGxvY2tlZF9pZCApOwogICAgICAgICAgICAgICAgfQoKICAgICAgICAgICAgICAgIHRocm93IG5ldyBcRXhjZXB0aW9uKAogICAgICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgICAgIF9fKCAnU29ycnksIHRoZSBhdWN0aW9uIGZvciAiJXMiIGhhcyBhbHJlYWR5IGJlZW4gcHVyY2hhc2VkIGJ5IGFub3RoZXIgYnV5ZXIuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICksCiAgICAgICAgICAgICAgICAgICAgICAgIGdldF90aGVfdGl0bGUoICRwcm9kdWN0X2lkICkKICAgICAgICAgICAgICAgICAgICApCiAgICAgICAgICAgICAgICApOwogICAgICAgICAgICB9CgogICAgICAgICAgICAkbG9ja2VkX2lkc1tdID0gJHByb2R1Y3RfaWQ7CiAgICAgICAgfQogICAgfQoKICAgIC8qKgogICAgICogUmVsZWFzZSBhbnkgYXVjdGlvbiBsb2NrcyBpZiBXQyBjaGVja291dCB2YWxpZGF0aW9uIHByb2R1Y2VkIGVycm9ycy4KICAgICAqIFByZXZlbnRzIG9ycGhhbmVkIGxvY2tzIHdoZW4gYSByZXF1aXJlZCBmaWVsZCBpcyBtaXNzaW5nLgogICAgICovCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHJlbGVhc2VfbG9ja3Nfb25fZXJyb3IoIGFycmF5ICRkYXRhLCBcV1BfRXJyb3IgJGVycm9ycyApOiB2b2lkIHsKICAgICAgICBpZiAoICEgJGVycm9ycy0+aGFzX2Vycm9ycygpIHx8ICEgV0MoKS0+Y2FydCApIHsKICAgICAgICAgICAgcmV0dXJuOwogICAgICAgIH0KCiAgICAgICAgZm9yZWFjaCAoIFdDKCktPmNhcnQtPmdldF9jYXJ0KCkgYXMgJGl0ZW0gKSB7CiAgICAgICAgICAgIGlmICggISBpc3NldCggJGl0ZW1bJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXSApICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRwcm9kdWN0X2lkID0gKGludCkgJGl0ZW1bJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXTsKICAgICAgICAgICAgJHN0YXR1cyAgICAgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgIGlmICggJ3Byb2Nlc3NpbmcnID09PSAkc3RhdHVzICkgewogICAgICAgICAgICAgICAgJGxvY2tfb3duZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICAgICBpZiAoICRsb2NrX293bmVyID09PSBnZXRfY3VycmVudF91c2VyX2lkKCkgKSB7CiAgICAgICAgICAgICAgICAgICAgc2VsZjo6cmVsZWFzZV9sb2NrKCAkcHJvZHVjdF9pZCApOwogICAgICAgICAgICAgICAgfQogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gdmFsaWRhdGVfb3JkZXJfcGF5KCk6IHZvaWQgewogICAgICAgIGdsb2JhbCAkd3A7CgogICAgICAgICRvcmRlcl9pZCA9IGFic2ludCggJHdwLT5xdWVyeV92YXJzWydvcmRlci1wYXknXSA\/PyAwICk7CiAgICAgICAgaWYgKCAhICRvcmRlcl9pZCApIHsKICAgICAgICAgICAgcmV0dXJuOwogICAgICAgIH0KCiAgICAgICAgJG9yZGVyID0gd2NfZ2V0X29yZGVyKCAkb3JkZXJfaWQgKTsKICAgICAgICBpZiAoICEgJG9yZGVyICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgICRwcm9jZXNzaW5nX3VzZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICRjdXJyZW50X3VzZXIgICAgPSBnZXRfY3VycmVudF91c2VyX2lkKCk7CgogICAgICAgICAgICBpZiAoIGluX2FycmF5KCAkc3RhdHVzLCBbICdzb2xkJywgJ2V4cGlyZWQnLCAnc3RvcHBlZCcgXSwgdHJ1ZSApICkgewogICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKCAnY2FuY2VsbGVkJywgX18oICdBdWN0aW9uIGlzIG5vIGxvbmdlciBhdmFpbGFibGUuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICkgKTsKICAgICAgICAgICAgICAgIHdjX2FkZF9ub3RpY2UoIF9fKCAnVGhpcyBhdWN0aW9uIGhhcyBhbHJlYWR5IGVuZGVkLiBZb3VyIG9yZGVyIGhhcyBiZWVuIGNhbmNlbGxlZC4nLCAna2xva3Rpb24tZHV0Y2gtYXVjdGlvbicgKSwgJ2Vycm9yJyApOwogICAgICAgICAgICAgICAgd3Bfc2FmZV9yZWRpcmVjdCggd2NfZ2V0X2FjY291bnRfZW5kcG9pbnRfdXJsKCAnb3JkZXJzJyApICk7CiAgICAgICAgICAgICAgICBleGl0OwogICAgICAgICAgICB9CgogICAgICAgICAgICAvLyBCbG9jayBwYXltZW50IHVubGVzcyB0aGlzIHVzZXIgY3VycmVudGx5IGhvbGRzIHRoZSBwcm9jZXNzaW5nIGxvY2suCiAgICAgICAgICAgIC8vIENvdmVyczogbG9jayBleHBpcmVkIGFuZCBhdWN0aW9uIHJldHVybmVkIHRvIGFjdGl2ZS9wYXVzZWQsIG9yIGFub3RoZXIgdXNlciBob2xkcyBpdC4KICAgICAgICAgICAgaWYgKCAncHJvY2Vzc2luZycgIT09ICRzdGF0dXMgfHwgJHByb2Nlc3NpbmdfdXNlciAhPT0gJGN1cnJlbnRfdXNlciApIHsKICAgICAgICAgICAgICAgICRvcmRlci0+dXBkYXRlX3N0YXR1cyggJ2NhbmNlbGxlZCcsIF9fKCAnWW91ciBwcmljZSBsb2NrIGhhcyBleHBpcmVkLiBPcmRlciBjYW5jZWxsZWQuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICkgKTsKICAgICAgICAgICAgICAgIHdjX2FkZF9ub3RpY2UoIF9fKCAnWW91ciBwcmljZSBsb2NrIGhhcyBleHBpcmVkLiBQbGVhc2UgYWRkIHRoZSBpdGVtIHRvIHlvdXIgY2FydCBhZ2Fpbi4nLCAna2xva3Rpb24tZHV0Y2gtYXVjdGlvbicgKSwgJ2Vycm9yJyApOwogICAgICAgICAgICAgICAgd3Bfc2FmZV9yZWRpcmVjdCggd2NfZ2V0X2FjY291bnRfZW5kcG9pbnRfdXJsKCAnb3JkZXJzJyApICk7CiAgICAgICAgICAgICAgICBleGl0OwogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gYWRkX29yZGVyX2l0ZW1fbWV0YSggJGl0ZW0sICRjYXJ0X2l0ZW1fa2V5LCAkdmFsdWVzLCAkb3JkZXIgKTogdm9pZCB7CiAgICAgICAgaWYgKCAhIGlzc2V0KCAkdmFsdWVzWydrbG9rdGlvbl9mcm96ZW5fcHJpY2UnXSApICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICAkc3RhcnRfcHJpY2UgPSAoZmxvYXQpIGdldF9wb3N0X21ldGEoICR2YWx1ZXNbJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXSwgJ19rbG9rdGlvbl9zdGFydF9wcmljZScsIHRydWUgKTsKICAgICAgICAkZnJvemVuICAgICAgPSAoZmxvYXQpICR2YWx1ZXNbJ2tsb2t0aW9uX2Zyb3plbl9wcmljZSddOwogICAgICAgICRzYXZpbmdzICAgICA9ICRzdGFydF9wcmljZSAtICRmcm96ZW47CiAgICAgICAgJHBjdCAgICAgICAgID0gJHN0YXJ0X3ByaWNlID4gMCA\/IHJvdW5kKCAoICRzYXZpbmdzIC8gJHN0YXJ0X3ByaWNlICkgKiAxMDAsIDEgKSA6IDA7CgogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX2Zyb3plbl9wcmljZScsICRmcm96ZW4gKTsKICAgICAgICAkaXRlbS0+YWRkX21ldGFfZGF0YSggJ19rbG9rdGlvbl9zdGFydF9wcmljZScsICRzdGFydF9wcmljZSApOwogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhdmluZ3MnLCAkc2F2aW5ncyApOwogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhdmluZ3NfcGVyY2VudCcsICRwY3QgKTsKICAgICAgICAkaXRlbS0+YWRkX21ldGFfZGF0YSggJ19rbG9rdGlvbl9wcm9kdWN0X2lkJywgKGludCkgJHZhbHVlc1sna2xva3Rpb25fcHJvZHVjdF9pZCddICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBoYW5kbGVfcGF5bWVudF9jb21wbGV0ZSggaW50ICRvcmRlcl9pZCApOiB2b2lkIHsKICAgICAgICAkb3JkZXIgPSB3Y19nZXRfb3JkZXIoICRvcmRlcl9pZCApOwogICAgICAgIGlmICggISAkb3JkZXIgKSB7CiAgICAgICAgICAgIHJldHVybjsKICAgICAgICB9CgogICAgICAgIC8vIGFscmVhZHkgcHJvY2Vzc2VkCiAgICAgICAgaWYgKCAkb3JkZXItPmdldF9tZXRhKCAnX2tsb2t0aW9uX3NhbGVfZmluYWxpemVkJyApICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgIGlmICggISBpbl9hcnJheSggJHN0YXR1cywgWyAncHJvY2Vzc2luZycsICdhY3RpdmUnLCAncGF1c2VkJyBdLCB0cnVlICkgKSB7CiAgICAgICAgICAgICAgICAkb3JkZXItPnVwZGF0ZV9zdGF0dXMoCiAgICAgICAgICAgICAgICAgICAgJ2NhbmNlbGxlZCcsCiAgICAgICAgICAgICAgICAgICAgc3ByaW50ZigKICAgICAgICAgICAgICAgICAgICAgICAgX18oICdBdWN0aW9uICIlcyIgaXMgbm8gbG9uZ2VyIGF2YWlsYWJsZSAoc3RhdHVzOiAlcykuIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgICAgICBnZXRfdGhlX3RpdGxlKCAkcHJvZHVjdF9pZCApLAogICAgICAgICAgICAgICAgICAgICAgICAkc3RhdHVzCiAgICAgICAgICAgICAgICAgICAgKQogICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2RvdWJsZV9zZWxsX2Jsb2NrZWQnLCBudWxsLCAkb3JkZXItPmdldF9jdXN0b21lcl9pZCgpLCBbCiAgICAgICAgICAgICAgICAgICAgJ29yZGVyX2lkJyAgICAgICA9PiAkb3JkZXJfaWQsCiAgICAgICAgICAgICAgICAgICAgJ2F1Y3Rpb25fc3RhdHVzJyA9PiAkc3RhdHVzLAogICAgICAgICAgICAgICAgXSApOwogICAgICAgICAgICAgICAgcmV0dXJuOwogICAgICAgICAgICB9CgogICAgICAgICAgICBpZiAoICdwcm9jZXNzaW5nJyA9PT0gJHN0YXR1cyApIHsKICAgICAgICAgICAgICAgICRwcm9jZXNzaW5nX3VzZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICAgICAkYnV5ZXJfaWQgICAgICAgID0gJG9yZGVyLT5nZXRfY3VzdG9tZXJfaWQoKTsKICAgICAgICAgICAgICAgIGlmICggJHByb2Nlc3NpbmdfdXNlciAmJiAkcHJvY2Vzc2luZ191c2VyICE9PSAkYnV5ZXJfaWQgKSB7CiAgICAgICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKAogICAgICAgICAgICAgICAgICAgICAgICAnY2FuY2VsbGVkJywKICAgICAgICAgICAgICAgICAgICAgICAgX18oICdBbm90aGVyIGJ1eWVyIGhvbGRzIHRoZSBsb2NrIGZvciB0aGlzIGF1Y3Rpb24uIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApCiAgICAgICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRmcm96ZW4gPSAoZmxvYXQpICRpdGVtLT5nZXRfbWV0YSggJ19rbG9rdGlvbl9mcm96ZW5fcHJpY2UnICk7CiAgICAgICAgICAgICRzdGFydCAgPSAoZmxvYXQpICRpdGVtLT5nZXRfbWV0YSggJ19rbG9rdGlvbl9zdGFydF9wcmljZScgKTsKICAgICAgICAgICAgJHBjdCAgICA9IChmbG9hdCkgJGl0ZW0tPmdldF9tZXRhKCAnX2tsb2t0aW9uX3NhdmluZ3NfcGVyY2VudCcgKTsKCiAgICAgICAgICAgICRidXllcl9pZCA9ICRvcmRlci0+Z2V0X2N1c3RvbWVyX2lkKCk7CiAgICAgICAgICAgICRzb2xkID0gQXVjdGlvbl9FbmdpbmU6OnNlbGxfYXVjdGlvbiggJHByb2R1Y3RfaWQsICRidXllcl9pZCwgJGZyb3plbiApOwoKICAgICAgICAgICAgaWYgKCAhICRzb2xkICkgewogICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKAogICAgICAgICAgICAgICAgICAgICdjYW5jZWxsZWQnLAogICAgICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgICAgIF9fKCAnQXVjdGlvbiAiJXMiIGNvdWxkIG5vdCBiZSBmaW5hbGl6ZWQgKGFscmVhZHkgc29sZCBvciBlbmRlZCkuIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgICAgICBnZXRfdGhlX3RpdGxlKCAkcHJvZHVjdF9pZCApCiAgICAgICAgICAgICAgICAgICAgKQogICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2RvdWJsZV9zZWxsX2Jsb2NrZWQnLCAkZnJvemVuLCAkYnV5ZXJfaWQsIFsKICAgICAgICAgICAgICAgICAgICAnb3JkZXJfaWQnID0+ICRvcmRlcl9pZCwKICAgICAgICAgICAgICAgICAgICAncmVhc29uJyAgID0+ICdzZWxsX2F1Y3Rpb25fZmFpbGVkJywKICAgICAgICAgICAgICAgIF0gKTsKICAgICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgJG9yZGVyLT5hZGRfb3JkZXJfbm90ZSgKICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgX18oICdEdXRjaCBBdWN0aW9uIHB1cmNoYXNlOiAlcyBhdCAlcyAoc3RhcnRlZCBhdCAlcywgc2F2aW5ncyAlcyUlKScsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgIGdldF90aGVfdGl0bGUoICRwcm9kdWN0X2lkICksCiAgICAgICAgICAgICAgICAgICAgd2NfcHJpY2UoICRmcm96ZW4gKSwKICAgICAgICAgICAgICAgICAgICB3Y19wcmljZSggJHN0YXJ0ICksCiAgICAgICAgICAgICAgICAgICAgJHBjdAogICAgICAgICAgICAgICAgKQogICAgICAgICAgICApOwogICAgICAgIH0KCiAgICAgICAgJG9yZGVyLT51cGRhdGVfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhbGVfZmluYWxpemVkJywgdGltZSgpICk7CiAgICAgICAgJG9yZGVyLT5zYXZlKCk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBoYW5kbGVfcGF5bWVudF9mYWlsZWQoIGludCAkb3JkZXJfaWQgKTogdm9pZCB7CiAgICAgICAgJG9yZGVyID0gd2NfZ2V0X29yZGVyKCAkb3JkZXJfaWQgKTsKICAgICAgICBpZiAoICEgJG9yZGVyICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKICAgICAgICAgICAgaWYgKCAncHJvY2Vzc2luZycgPT09ICRzdGF0dXMgKSB7CiAgICAgICAgICAgICAgICBzZWxmOjpyZWxlYXNlX2xvY2soICRwcm9kdWN0X2lkICk7CiAgICAgICAgICAgIH0KICAgICAgICB9CiAgICB9Cgp9Cg==","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:02","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-installer.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:02","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:03","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-plugin.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:03","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-rest-api.php","content":"PD9waHAKbmFtZXNwYWNlIEtsb2t0aW9uOwoKZGVmaW5lZCggJ0FCU1BBVEgnICkgfHwgZXhpdDsKCmNsYXNzIFJlc3RfQXBpIHsKCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHJlZ2lzdGVyX3JvdXRlcygpOiB2b2lkIHsKICAgICAgICByZWdpc3Rlcl9yZXN0X3JvdXRlKCAna2xva3Rpb24vdjEnLCAnL2F1Y3Rpb24vKD9QPGlkPlxkKyknLCBbCiAgICAgICAgICAgICdtZXRob2RzJyAgICAgICAgICAgICA9PiAnR0VUJywKICAgICAgICAgICAgJ2NhbGxiYWNrJyAgICAgICAgICAgID0+IFsgX19DTEFTU19fLCAnZ2V0X2F1Y3Rpb24nIF0sCiAgICAgICAgICAgICdwZXJtaXNzaW9uX2NhbGxiYWNrJyA9PiAnX19yZXR1cm5fdHJ1ZScsCiAgICAgICAgICAgICdhcmdzJyAgICAgICAgICAgICAgICA9PiBbCiAgICAgICAgICAgICAgICAnaWQnID0+IFsgJ3R5cGUnID0+ICdpbnRlZ2VyJywgJ3JlcXVpcmVkJyA9PiB0cnVlLCAnc2FuaXRpemVfY2FsbGJhY2snID0+ICdhYnNpbnQnIF0sCiAgICAgICAgICAgIF0sCiAgICAgICAgXSApOwoKICAgICAgICByZWdpc3Rlcl9yZXN0X3JvdXRlKCAna2xva3Rpb24vdjEnLCAnL2F1Y3Rpb25zJywgWwogICAgICAgICAgICAnbWV0aG9kcycgICAgICAgICAgICAgPT4gJ0dFVCcsCiAgICAgICAgICAgICdjYWxsYmFjaycgICAgICAgICAgICA9PiBbIF9fQ0xBU1NfXywgJ2dldF9hdWN0aW9ucycgXSwKICAgICAgICAgICAgJ3Blcm1pc3Npb25fY2FsbGJhY2snID0+ICdfX3JldHVybl90cnVlJywKICAgICAgICAgICAgJ2FyZ3MnICAgICAgICAgICAgICAgID0+IFsKICAgICAgICAgICAgICAgICdzdGF0dXMnICAgPT4gWyAndHlwZScgPT4gJ3N0cmluZycsICdkZWZhdWx0JyA9PiAnYWN0aXZlJywgJ3Nhbml0aXplX2NhbGxiYWNrJyA9PiAnc2FuaXRpemVfdGV4dF9maWVsZCcgXSwKICAgICAgICAgICAgICAgICdwZXJfcGFnZScgPT4gWyAndHlwZScgPT4gJ2ludGVnZXInLCAnZGVmYXVsdCcgPT4gMjAsICdzYW5pdGl6ZV9jYWxsYmFjaycgPT4gJ2Fic2ludCcgXSwKICAgICAgICAgICAgICAgICdwYWdlJyAgICAgPT4gWyAndHlwZScgPT4gJ2ludGVnZXInLCAnZGVmYXVsdCcgPT4gMSwgJ3Nhbml0aXplX2NhbGxiYWNrJyA9PiAnYWJzaW50JyBdLAogICAgICAgICAgICBdLAogICAgICAgIF0gKTsKCiAgICAgICAgcmVnaXN0ZXJfcmVzdF9yb3V0ZSggJ2tsb2t0aW9uL3YxJywgJy9hdWN0aW9uLyg\/UDxpZD5cZCspL3N0b3AnLCBbCiAgICAgICAgICAgICdtZXRob2RzJyAgICAgICAgICAgICA9PiAnUE9TVCcsCiAgICAgICAgICAgICdjYWxsYmFjaycgICAgICAgICAgICA9PiBbIF9fQ0xBU1NfXywgJ3N0b3BfYXVjdGlvbicgXSwKICAgICAgICAgICAgJ3Blcm1pc3Npb25fY2FsbGJhY2snID0+IFsgX19DTEFTU19fLCAnYWRtaW5fcGVybWlzc2lvbicgXSwKICAgICAgICAgICAgJ2FyZ3MnICAgICAgICAgICAgICAgID0+IFsKICAgICAgICAgICAgICAgICdpZCcgICAgID0+IFsgJ3R5cGUnID0+ICdpbnRlZ2VyJywgJ3JlcXVpcmVkJyA9PiB0cnVlLCAnc2FuaXRpemVfY2FsbGJhY2snID0+ICdhYnNpbnQnIF0sCiAgICAgICAgICAgICAgICAncmVhc29uJyA9PiBbICd0eXBlJyA9PiAnc3RyaW5nJywgJ3JlcXVpcmVkJyA9PiB0cnVlLCAnc2FuaXRpemVfY2FsbGJhY2snID0+ICdzYW5pdGl6ZV90ZXh0X2ZpZWxkJyBdLAogICAgICAgICAgICBdLAogICAgICAgIF0gKTsKICAgIH0KCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIGFkbWluX3Blcm1pc3Npb24oKTogYm9vbCB7CiAgICAgICAgcmV0dXJuIGN1cnJlbnRfdXNlcl9jYW4oICdtYW5hZ2Vfd29vY29tbWVyY2UnICk7CiAgICB9CgogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gY2hlY2tfcmF0ZV9saW1pdCgpOiBib29sIHsKICAgICAgICAkaXAgPSBzZWxmOjpnZXRfY2xpZW50X2lwKCk7CiAgICAgICAgJGtleSAgICAgPSAna2xva3Rpb25fcmF0ZV8nIC4gbWQ1KCAkaXAgKTsKICAgICAgICAkY291bnQgICA9IChpbnQpIGdldF90cmFuc2llbnQoICRrZXkgKTsKICAgICAgICAkc2V0dGluZ3MgPSBnZXRfb3B0aW9uKCAna2xva3Rpb25fc2V0dGluZ3MnLCBbXSApOwogICAgICAgICRsaW1pdCAgID0gKGludCkgKCAkc2V0dGluZ3NbJ3JhdGVfbGltaXQnXSA\/PyA2MCApOwoKICAgICAgICBpZiAoICRjb3VudCA+PSAkbGltaXQgKSB7CiAgICAgICAgICAgIHJldHVybiBmYWxzZTsKICAgICAgICB9CgogICAgICAgIHNldF90cmFuc2llbnQoICRrZXksICRjb3VudCArIDEsIDYwICk7CiAgICAgICAgcmV0dXJuIHRydWU7CiAgICB9CgogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gZ2V0X2NsaWVudF9pcCgpOiBzdHJpbmcgewogICAgICAgIC8vIHByZWZlciBXQ19HZW9sb2NhdGlvbiAoaGFuZGxlcyBDbG91ZGZsYXJlL3Byb3hpZXMpCiAgICAgICAgaWYgKCBjbGFzc19leGlzdHMoICdcV0NfR2VvbG9jYXRpb24nICkgKSB7CiAgICAgICAgICAgICRpcCA9IFxXQ19HZW9sb2NhdGlvbjo6Z2V0X2lwX2FkZHJlc3MoKTsKICAgICAgICAgICAgaWYgKCAkaXAgKSB7CiAgICAgICAgICAgICAgICByZXR1cm4gJGlwOwogICAgICAgICAgICB9CiAgICAgICAgfQogICAgICAgIHJldHVybiAkX1NFUlZFUlsnUkVNT1RFX0FERFInXSA\/PyAnMC4wLjAuMCc7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBnZXRfYXVjdGlvbiggXFdQX1JFU1RfUmVxdWVzdCAkcmVxdWVzdCApOiBcV1BfUkVTVF9SZXNwb25zZSB7CiAgICAgICAgaWYgKCAhIHNlbGY6OmNoZWNrX3JhdGVfbGltaXQoKSApIHsKICAgICAgICAgICAgJHJlc3BvbnNlID0gbmV3IFxXUF9SRVNUX1Jlc3BvbnNlKCBbICdjb2RlJyA9PiAncmF0ZV9saW1pdGVkJywgJ21lc3NhZ2UnID0+ICdUb28gbWFueSByZXF1ZXN0cycgXSwgNDI5ICk7CiAgICAgICAgICAgICRyZXNwb25zZS0+aGVhZGVyKCAnUmV0cnktQWZ0ZXInLCAnNjAnICk7CiAgICAgICAgICAgIHJldHVybiAkcmVzcG9uc2U7CiAgICAgICAgfQoKICAgICAgICAkcHJvZHVjdF9pZCA9ICRyZXF1ZXN0LT5nZXRfcGFyYW0oICdpZCcgKTsKCiAgICAgICAgJGNhY2hlX2tleSA9ICdrbG9rdGlvbl9hcGlfJyAuICRwcm9kdWN0X2lkOwogICAgICAgICRjYWNoZWQgICAgPSBnZXRfdHJhbnNpZW50KCAkY2FjaGVfa2V5ICk7CiAgICAgICAgaWYgKCBmYWxzZSAhPT0gJGNhY2hlZCApIHsKICAgICAgICAgICAgcmV0dXJuIG5ldyBcV1BfUkVTVF9SZXNwb25zZSggJGNhY2hlZCwgMjAwICk7CiAgICAgICAgfQoKICAgICAgICAkcHJvZHVjdCA9IHdjX2dldF9wcm9kdWN0KCAkcHJvZHVjdF9pZCApOwogICAgICAgIGlmICggISAkcHJvZHVjdCB8fCAhICRwcm9kdWN0IGluc3RhbmNlb2YgUHJvZHVjdF9UeXBlIHx8ICdwdWJsaXNoJyAhPT0gZ2V0X3Bvc3Rfc3RhdHVzKCAkcHJvZHVjdF9pZCApICkgewogICAgICAgICAgICByZXR1cm4gbmV3IFxXUF9SRVNUX1Jlc3BvbnNlKCBbICdjb2RlJyA9PiAnbm90X2ZvdW5kJywgJ21lc3NhZ2UnID0+ICdBdWN0aW9uIG5vdCBmb3VuZCcgXSwgNDA0ICk7CiAgICAgICAgfQoKICAgICAgICAkZGF0YSA9IHNlbGY6OmZvcm1hdF9hdWN0aW9uKCAkcHJvZHVjdCApOwoKICAgICAgICBzZXRfdHJhbnNpZW50KCAkY2FjaGVfa2V5LCAkZGF0YSwgMiApOwoKICAgICAgICByZXR1cm4gbmV3IFxXUF9SRVNUX1Jlc3BvbnNlKCAkZGF0YSwgMjAwICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBnZXRfYXVjdGlvbnMoIFxXUF9SRVNUX1JlcXVlc3QgJHJlcXVlc3QgKTogXFdQX1JFU1RfUmVzcG9uc2UgewogICAgICAgIGlmICggISBzZWxmOjpjaGVja19yYXRlX2xpbWl0KCkgKSB7CiAgICAgICAgICAgICRyZXNwb25zZSA9IG5ldyBcV1BfUkVTVF9SZXNwb25zZSggWyAnY29kZScgPT4gJ3JhdGVfbGltaXRlZCcsICdtZXNzYWdlJyA9PiAnVG9vIG1hbnkgcmVxdWVzdHMnIF0sIDQyOSApOwogICAgICAgICAgICAkcmVzcG9uc2UtPmhlYWRlciggJ1JldHJ5LUFmdGVyJywgJzYwJyApOwogICAgICAgICAgICByZXR1cm4gJHJlc3BvbnNlOwogICAgICAgIH0KCiAgICAgICAgJHN0YXR1cyAgID0gJHJlcXVlc3QtPmdldF9wYXJhbSggJ3N0YXR1cycgKTsKICAgICAgICAkcGVyX3BhZ2UgPSBtYXgoIDEsIG1pbiggKGludCkgJHJlcXVlc3QtPmdldF9wYXJhbSggJ3Blcl9wYWdlJyApLCAxMDAgKSApOwogICAgICAgICRwYWdlICAgICA9IG1heCggMSwgKGludCkgJHJlcXVlc3QtPmdldF9wYXJhbSggJ3BhZ2UnICkgKTsKCiAgICAgICAgZ2xvYmFsICR3cGRiOwoKICAgICAgICAkdmFsaWRfc3RhdHVzZXMgPSBbICdhY3RpdmUnLCAncGF1c2VkJywgJ3NjaGVkdWxlZCcsICdzb2xkJywgJ2V4cGlyZWQnLCAnc3RvcHBlZCcgXTsKICAgICAgICBpZiAoICEgaW5fYXJyYXkoICRzdGF0dXMsICR2YWxpZF9zdGF0dXNlcywgdHJ1ZSApICkgewogICAgICAgICAgICAkc3RhdHVzID0gJ2FjdGl2ZSc7CiAgICAgICAgfQoKICAgICAgICAkdG90YWwgPSAoaW50KSAkd3BkYi0+Z2V0X3ZhcigKICAgICAgICAgICAgJHdwZGItPnByZXBhcmUoCiAgICAgICAgICAgICAgICAiU0VMRUNUIENPVU5UKERJU1RJTkNUIHBtLnBvc3RfaWQpCiAgICAgICAgICAgICAgICAgRlJPTSB7JHdwZGItPnBvc3RtZXRhfSBwbQogICAgICAgICAgICAgICAgIElOTkVSIEpPSU4geyR3cGRiLT5wb3N0c30gcCBPTiBwLklEID0gcG0ucG9zdF9pZAogICAgICAgICAgICAgICAgIFdIRVJFIHBtLm1ldGFfa2V5ID0gJ19rbG9rdGlvbl9zdGF0dXMnCiAgICAgICAgICAgICAgICAgICBBTkQgcG0ubWV0YV92YWx1ZSA9ICVzCiAgICAgICAgICAgICAgICAgICBBTkQgcC5wb3N0X3N0YXR1cyA9ICdwdWJsaXNoJyIsCiAgICAgICAgICAgICAgICAkc3RhdHVzCiAgICAgICAgICAgICkKICAgICAgICApOwoKICAgICAgICAkb2Zmc2V0ICAgICA9ICggJHBhZ2UgLSAxICkgKiAkcGVyX3BhZ2U7CiAgICAgICAgJHByb2R1Y3RfaWRzID0gJHdwZGItPmdldF9jb2woCiAgICAgICAgICAgICR3cGRiLT5wcmVwYXJlKAogICAgICAgICAgICAgICAgIlNFTEVDVCBwbS5wb3N0X2lkCiAgICAgICAgICAgICAgICAgRlJPTSB7JHdwZGItPnBvc3RtZXRhfSBwbQogICAgICAgICAgICAgICAgIElOTkVSIEpPSU4geyR3cGRiLT5wb3N0c30gcCBPTiBwLklEID0gcG0ucG9zdF9pZAogICAgICAgICAgICAgICAgIFdIRVJFIHBtLm1ldGFfa2V5ID0gJ19rbG9rdGlvbl9zdGF0dXMnCiAgICAgICAgICAgICAgICAgICBBTkQgcG0ubWV0YV92YWx1ZSA9ICVzCiAgICAgICAgICAgICAgICAgICBBTkQgcC5wb3N0X3N0YXR1cyA9ICdwdWJsaXNoJwogICAgICAgICAgICAgICAgIE9SREVSIEJZIHAuSUQgREVTQwogICAgICAgICAgICAgICAgIExJTUlUICVkIE9GRlNFVCAlZCIsCiAgICAgICAgICAgICAgICAkc3RhdHVzLAogICAgICAgICAgICAgICAgJHBlcl9wYWdlLAogICAgICAgICAgICAgICAgJG9mZnNldAogICAgICAgICAgICApCiAgICAgICAgKTsKCiAgICAgICAgJGF1Y3Rpb25zID0gW107CiAgICAgICAgZm9yZWFjaCAoICRwcm9kdWN0X2lkcyBhcyAkcGlkICkgewogICAgICAgICAgICAkcHJvZHVjdCA9IHdjX2dldF9wcm9kdWN0KCAoaW50KSAkcGlkICk7CiAgICAgICAgICAgIGlmICggJHByb2R1Y3QgaW5zdGFuY2VvZiBQcm9kdWN0X1R5cGUgKSB7CiAgICAgICAgICAgICAgICAkYXVjdGlvbnNbXSA9IHNlbGY6OmZvcm1hdF9hdWN0aW9uKCAkcHJvZHVjdCApOwogICAgICAgICAgICB9CiAgICAgICAgfQoKICAgICAgICAkcmVzcG9uc2UgPSBuZXcgXFdQX1JFU1RfUmVzcG9uc2UoICRhdWN0aW9ucywgMjAwICk7CiAgICAgICAgJHJlc3BvbnNlLT5oZWFkZXIoICdYLVdQLVRvdGFsJywgJHRvdGFsICk7CiAgICAgICAgJHJlc3BvbnNlLT5oZWFkZXIoICdYLVdQLVRvdGFsUGFnZXMnLCBjZWlsKCAkdG90YWwgLyAkcGVyX3BhZ2UgKSApOwoKICAgICAgICByZXR1cm4gJHJlc3BvbnNlOwogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gc3RvcF9hdWN0aW9uKCBcV1BfUkVTVF9SZXF1ZXN0ICRyZXF1ZXN0ICk6IFxXUF9SRVNUX1Jlc3BvbnNlIHsKICAgICAgICAkcHJvZHVjdF9pZCA9ICRyZXF1ZXN0LT5nZXRfcGFyYW0oICdpZCcgKTsKICAgICAgICAkcmVhc29uICAgICA9ICRyZXF1ZXN0LT5nZXRfcGFyYW0oICdyZWFzb24nICk7CgogICAgICAgIGlmICggZW1wdHkoICRyZWFzb24gKSApIHsKICAgICAgICAgICAgcmV0dXJuIG5ldyBcV1BfUkVTVF9SZXNwb25zZSggWyAnY29kZScgPT4gJ21pc3NpbmdfcmVhc29uJywgJ21lc3NhZ2UnID0+ICdSZWFzb24gaXMgcmVxdWlyZWQnIF0sIDQwMCApOwogICAgICAgIH0KCiAgICAgICAgJHByb2R1Y3QgPSB3Y19nZXRfcHJvZHVjdCggJHByb2R1Y3RfaWQgKTsKICAgICAgICBpZiAoICEgJHByb2R1Y3QgfHwgISAkcHJvZHVjdCBpbnN0YW5jZW9mIFByb2R1Y3RfVHlwZSB8fCAncHVibGlzaCcgIT09IGdldF9wb3N0X3N0YXR1cyggJHByb2R1Y3RfaWQgKSApIHsKICAgICAgICAgICAgcmV0dXJuIG5ldyBcV1BfUkVTVF9SZXNwb25zZSggWyAnY29kZScgPT4gJ25vdF9mb3VuZCcsICdtZXNzYWdlJyA9PiAnQXVjdGlvbiBub3QgZm91bmQnIF0sIDQwNCApOwogICAgICAgIH0KCiAgICAgICAgJHJlc3VsdCA9IEF1Y3Rpb25fRW5naW5lOjpzdG9wX2F1Y3Rpb24oICRwcm9kdWN0X2lkLCBnZXRfY3VycmVudF91c2VyX2lkKCksICRyZWFzb24gKTsKCiAgICAgICAgaWYgKCAhICRyZXN1bHQgKSB7CiAgICAgICAgICAgIHJldHVybiBuZXcgXFdQX1JFU1RfUmVzcG9uc2UoIFsgJ2NvZGUnID0+ICdjYW5ub3Rfc3RvcCcsICdtZXNzYWdlJyA9PiAnQXVjdGlvbiBjYW5ub3QgYmUgc3RvcHBlZCBpbiBpdHMgY3VycmVudCBzdGF0ZScgXSwgNDAwICk7CiAgICAgICAgfQoKICAgICAgICByZXR1cm4gbmV3IFxXUF9SRVNUX1Jlc3BvbnNlKCBbICdzdWNjZXNzJyA9PiB0cnVlLCAnbWVzc2FnZScgPT4gJ0F1Y3Rpb24gc3RvcHBlZCcgXSwgMjAwICk7CiAgICB9CgogICAgcHJpdmF0ZSBzdGF0aWMgZnVuY3Rpb24gZm9ybWF0X2F1Y3Rpb24oIFByb2R1Y3RfVHlwZSAkcHJvZHVjdCApOiBhcnJheSB7CiAgICAgICAgJGlkICAgICAgICAgICAgPSAkcHJvZHVjdC0+Z2V0X2lkKCk7CiAgICAgICAgJHN0YXR1cyAgICAgICAgPSAkcHJvZHVjdC0+Z2V0X2F1Y3Rpb25fc3RhdHVzKCk7CiAgICAgICAgJGN1cnJlbnRfcHJpY2UgPSBBdWN0aW9uX0VuZ2luZTo6Y2FsY3VsYXRlX3ByaWNlKCAkaWQgKTsKICAgICAgICAkc3RhcnRfcHJpY2UgICA9IChmbG9hdCkgZ2V0X3Bvc3RfbWV0YSggJGlkLCAnX2tsb2t0aW9uX3N0YXJ0X3ByaWNlJywgdHJ1ZSApOwogICAgICAgICRyZXNlcnZlX3ByaWNlID0gKGZsb2F0KSBnZXRfcG9zdF9tZXRhKCAkaWQsICdfa2xva3Rpb25fcmVzZXJ2ZV9wcmljZScsIHRydWUgKTsKCiAgICAgICAgJGRhdGEgPSBbCiAgICAgICAgICAgICdwcm9kdWN0X2lkJyAgICAgPT4gJGlkLAogICAgICAgICAgICAndGl0bGUnICAgICAgICAgID0+ICRwcm9kdWN0LT5nZXRfbmFtZSgpLAogICAgICAgICAgICAnc3RhdHVzJyAgICAgICAgID0+ICRzdGF0dXMsCiAgICAgICAgICAgICdjdXJyZW50X3ByaWNlJyAgPT4gJGN1cnJlbnRfcHJpY2UsCiAgICAgICAgICAgICdmb3JtYXR0ZWRfcHJpY2UnPT4gc3RyaXBfdGFncyggd2NfcHJpY2UoICRjdXJyZW50X3ByaWNlICkgKSwKICAgICAgICAgICAgJ3N0YXJ0X3ByaWNlJyAgICA9PiAkc3RhcnRfcHJpY2UsCiAgICAgICAgICAgICdyZXNlcnZlX3ByaWNlJyAgPT4gJHJlc2VydmVfcHJpY2UsCiAgICAgICAgICAgICd0aW1lX3JlbWFpbmluZycgPT4gQXVjdGlvbl9FbmdpbmU6OmdldF90aW1lX3JlbWFpbmluZyggJGlkICksCiAgICAgICAgICAgICdwcm9ncmVzcycgICAgICAgPT4gQXVjdGlvbl9FbmdpbmU6OmdldF9wcm9ncmVzcyggJGlkICksCiAgICAgICAgICAgICdjYW5fcHVyY2hhc2UnICAgPT4gJHByb2R1Y3QtPmlzX3B1cmNoYXNhYmxlKCkgJiYgJHByb2R1Y3QtPmlzX2luX3N0b2NrKCksCiAgICAgICAgXTsKCiAgICAgICAgaWYgKCAncGF1c2VkJyA9PT0gJHN0YXR1cyApIHsKICAgICAgICAgICAgJGRhdGFbJ3BhdXNlX3JlbWFpbmluZyddID0gQXVjdGlvbl9FbmdpbmU6OmdldF90aW1lX3JlbWFpbmluZyggJGlkICk7CiAgICAgICAgfQoKICAgICAgICBpZiAoICdzb2xkJyA9PT0gJHN0YXR1cyApIHsKICAgICAgICAgICAgJGRhdGFbJ3NvbGRfcHJpY2UnXSA9IChmbG9hdCkgZ2V0X3Bvc3RfbWV0YSggJGlkLCAnX2tsb2t0aW9uX3NvbGRfcHJpY2UnLCB0cnVlICk7CiAgICAgICAgfQoKICAgICAgICByZXR1cm4gJGRhdGE7CiAgICB9Cn0K","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:04","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/uninstall.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:05:12","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:05:19","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:05:27","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 14:05:35","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 14:05:42","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 14:05:56","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:06:18","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:06:53","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"kloktion-v3.0.1.zip","content":"","delete":true},"result":null}
{"timestamp":"2026-03-04 14:06:54","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-03-04 14:16:21","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:16:22","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:16:22","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:16:23","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","content":"PD9waHAKbmFtZXNwYWNlIEtsb2t0aW9uOwoKZGVmaW5lZCggJ0FCU1BBVEgnICkgfHwgZXhpdDsKCmNsYXNzIENoZWNrb3V0X0hhbmRsZXIgewoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gaW5pdCgpOiB2b2lkIHsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfY2hlY2tvdXRfcHJvY2VzcycsIFsgX19DTEFTU19fLCAndmFsaWRhdGVfY2hlY2tvdXQnIF0gKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfYWZ0ZXJfY2hlY2tvdXRfdmFsaWRhdGlvbicsIFsgX19DTEFTU19fLCAncmVsZWFzZV9sb2Nrc19vbl9lcnJvcicgXSwgMTAsIDIgKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfY2hlY2tvdXRfY3JlYXRlX29yZGVyX2xpbmVfaXRlbScsIFsgX19DTEFTU19fLCAnYWRkX29yZGVyX2l0ZW1fbWV0YScgXSwgMTAsIDQgKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2VfcGF5bWVudF9jb21wbGV0ZScsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfY29tcGxldGUnIF0gKTsKICAgICAgICBhZGRfYWN0aW9uKCAnd29vY29tbWVyY2Vfb3JkZXJfc3RhdHVzX2ZhaWxlZCcsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfZmFpbGVkJyBdICk7CiAgICAgICAgYWRkX2FjdGlvbiggJ3dvb2NvbW1lcmNlX29yZGVyX3N0YXR1c19jYW5jZWxsZWQnLCBbIF9fQ0xBU1NfXywgJ2hhbmRsZV9wYXltZW50X2ZhaWxlZCcgXSApOwogICAgICAgIGFkZF9hY3Rpb24oICd3b29jb21tZXJjZV9vcmRlcl9zdGF0dXNfY29tcGxldGVkJywgWyBfX0NMQVNTX18sICdoYW5kbGVfcGF5bWVudF9jb21wbGV0ZScgXSApOwogICAgICAgIGFkZF9hY3Rpb24oICd3b29jb21tZXJjZV9vcmRlcl9zdGF0dXNfcHJvY2Vzc2luZycsIFsgX19DTEFTU19fLCAnaGFuZGxlX3BheW1lbnRfY29tcGxldGUnIF0gKTsKCiAgICAgICAgLy8gcHJldmVudCBkb3VibGUtc2VsbCBvbiBvcmRlci1wYXkKICAgICAgICBhZGRfYWN0aW9uKCAnYmVmb3JlX3dvb2NvbW1lcmNlX3BheScsIFsgX19DTEFTU19fLCAndmFsaWRhdGVfb3JkZXJfcGF5JyBdICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBhY3F1aXJlX2xvY2soIGludCAkcHJvZHVjdF9pZCwgaW50ICR1c2VyX2lkICk6IGJvb2wgewogICAgICAgIGdsb2JhbCAkd3BkYjsKCiAgICAgICAgJGFmZmVjdGVkID0gJHdwZGItPnF1ZXJ5KAogICAgICAgICAgICAkd3BkYi0+cHJlcGFyZSgKICAgICAgICAgICAgICAgICJVUERBVEUgeyR3cGRiLT5wb3N0bWV0YX0KICAgICAgICAgICAgICAgICBTRVQgbWV0YV92YWx1ZSA9ICdwcm9jZXNzaW5nJwogICAgICAgICAgICAgICAgIFdIRVJFIHBvc3RfaWQgPSAlZAogICAgICAgICAgICAgICAgICAgQU5EIG1ldGFfa2V5ID0gJ19rbG9rdGlvbl9zdGF0dXMnCiAgICAgICAgICAgICAgICAgICBBTkQgbWV0YV92YWx1ZSBJTiAoJ2FjdGl2ZScsICdwYXVzZWQnKSIsCiAgICAgICAgICAgICAgICAkcHJvZHVjdF9pZAogICAgICAgICAgICApCiAgICAgICAgKTsKCiAgICAgICAgaWYgKCAxID09PSAkYWZmZWN0ZWQgKSB7CiAgICAgICAgICAgIC8vIEZsdXNoIFdQIG9iamVjdCBjYWNoZSBhZnRlciBkaXJlY3QgU1FMIHNvIGdldF9wb3N0X21ldGEgcmVhZHMgZnJlc2ggZGF0YS4KICAgICAgICAgICAgd3BfY2FjaGVfZGVsZXRlKCAkcHJvZHVjdF9pZCwgJ3Bvc3RfbWV0YScgKTsKCiAgICAgICAgICAgIHVwZGF0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicsICR1c2VyX2lkICk7CiAgICAgICAgICAgIHVwZGF0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3Npbmdfc2luY2UnLCB0aW1lKCkgKTsKCiAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2xvY2tfYWNxdWlyZWQnLCBBdWN0aW9uX0VuZ2luZTo6Y2FsY3VsYXRlX3ByaWNlKCAkcHJvZHVjdF9pZCApLCAkdXNlcl9pZCApOwogICAgICAgICAgICBkZWxldGVfdHJhbnNpZW50KCAna2xva3Rpb25fYXBpXycgLiAkcHJvZHVjdF9pZCApOwoKICAgICAgICAgICAgcmV0dXJuIHRydWU7CiAgICAgICAgfQoKICAgICAgICByZXR1cm4gZmFsc2U7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiByZWxlYXNlX2xvY2soIGludCAkcHJvZHVjdF9pZCApOiB2b2lkIHsKICAgICAgICAkcmVzZXJ2ZSA9IChmbG9hdCkgZ2V0X3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fcmVzZXJ2ZV9wcmljZScsIHRydWUgKTsKICAgICAgICAkcHJpY2UgICA9IEF1Y3Rpb25fRW5naW5lOjpjYWxjdWxhdGVfcHJpY2UoICRwcm9kdWN0X2lkICk7CgogICAgICAgIC8vIERldGVybWluZSB3aGF0IHN0YXR1cyB0byByZXN0b3JlLgogICAgICAgICRyZXN0b3JlID0gKCAkcHJpY2UgPD0gJHJlc2VydmUgKSA\/ICdwYXVzZWQnIDogJ2FjdGl2ZSc7CgogICAgICAgIC8vIERpcmVjdCB1cGRhdGUgdG8gYnlwYXNzIHRyYW5zaXRpb24gdmFsaWRhdGlvbiAocHJvY2Vzc2luZyDihpIgYWN0aXZlL3BhdXNlZCkuCiAgICAgICAgdXBkYXRlX3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fc3RhdHVzJywgJHJlc3RvcmUgKTsKCiAgICAgICAgaWYgKCAncGF1c2VkJyA9PT0gJHJlc3RvcmUgJiYgISBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wYXVzZV9zdGFydCcsIHRydWUgKSApIHsKICAgICAgICAgICAgdXBkYXRlX3Bvc3RfbWV0YSggJHByb2R1Y3RfaWQsICdfa2xva3Rpb25fcGF1c2Vfc3RhcnQnLCB0aW1lKCkgKTsKICAgICAgICB9CgogICAgICAgIGRlbGV0ZV9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicgKTsKICAgICAgICBkZWxldGVfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3NpbmNlJyApOwoKICAgICAgICBMb2dnZXI6OmxvZyggJHByb2R1Y3RfaWQsICdsb2NrX3JlbGVhc2VkJywgJHByaWNlICk7CiAgICAgICAgZGVsZXRlX3RyYW5zaWVudCggJ2tsb2t0aW9uX2FwaV8nIC4gJHByb2R1Y3RfaWQgKTsKICAgIH0KCiAgICAvLyBhY3F1aXJlIGxvY2tzOyByZWxlYXNlIGFsbCBvbiBmYWlsdXJlCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHZhbGlkYXRlX2NoZWNrb3V0KCk6IHZvaWQgewogICAgICAgIGlmICggISBXQygpLT5jYXJ0ICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICAkdXNlcl9pZCAgICAgID0gZ2V0X2N1cnJlbnRfdXNlcl9pZCgpOwogICAgICAgICRsb2NrZWRfaWRzICAgPSBbXTsKCiAgICAgICAgZm9yZWFjaCAoIFdDKCktPmNhcnQtPmdldF9jYXJ0KCkgYXMgJGtleSA9PiAkaXRlbSApIHsKICAgICAgICAgICAgaWYgKCAhIGlzc2V0KCAkaXRlbVsna2xva3Rpb25fcHJvZHVjdF9pZCddICkgKSB7CiAgICAgICAgICAgICAgICBjb250aW51ZTsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbVsna2xva3Rpb25fcHJvZHVjdF9pZCddOwoKICAgICAgICAgICAgaWYgKCAhIHNlbGY6OmFjcXVpcmVfbG9jayggJHByb2R1Y3RfaWQsICR1c2VyX2lkID86IDAgKSApIHsKICAgICAgICAgICAgICAgIGZvcmVhY2ggKCAkbG9ja2VkX2lkcyBhcyAkbG9ja2VkX2lkICkgewogICAgICAgICAgICAgICAgICAgIHNlbGY6OnJlbGVhc2VfbG9jayggJGxvY2tlZF9pZCApOwogICAgICAgICAgICAgICAgfQoKICAgICAgICAgICAgICAgIHRocm93IG5ldyBcRXhjZXB0aW9uKAogICAgICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgICAgIF9fKCAnU29ycnksIHRoZSBhdWN0aW9uIGZvciAiJXMiIGhhcyBhbHJlYWR5IGJlZW4gcHVyY2hhc2VkIGJ5IGFub3RoZXIgYnV5ZXIuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICksCiAgICAgICAgICAgICAgICAgICAgICAgIGdldF90aGVfdGl0bGUoICRwcm9kdWN0X2lkICkKICAgICAgICAgICAgICAgICAgICApCiAgICAgICAgICAgICAgICApOwogICAgICAgICAgICB9CgogICAgICAgICAgICAkbG9ja2VkX2lkc1tdID0gJHByb2R1Y3RfaWQ7CiAgICAgICAgfQogICAgfQoKICAgIC8qKgogICAgICogUmVsZWFzZSBhbnkgYXVjdGlvbiBsb2NrcyBpZiBXQyBjaGVja291dCB2YWxpZGF0aW9uIHByb2R1Y2VkIGVycm9ycy4KICAgICAqIFByZXZlbnRzIG9ycGhhbmVkIGxvY2tzIHdoZW4gYSByZXF1aXJlZCBmaWVsZCBpcyBtaXNzaW5nLgogICAgICovCiAgICBwdWJsaWMgc3RhdGljIGZ1bmN0aW9uIHJlbGVhc2VfbG9ja3Nfb25fZXJyb3IoIGFycmF5ICRkYXRhLCBcV1BfRXJyb3IgJGVycm9ycyApOiB2b2lkIHsKICAgICAgICBpZiAoICEgJGVycm9ycy0+aGFzX2Vycm9ycygpIHx8ICEgV0MoKS0+Y2FydCApIHsKICAgICAgICAgICAgcmV0dXJuOwogICAgICAgIH0KCiAgICAgICAgZm9yZWFjaCAoIFdDKCktPmNhcnQtPmdldF9jYXJ0KCkgYXMgJGl0ZW0gKSB7CiAgICAgICAgICAgIGlmICggISBpc3NldCggJGl0ZW1bJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXSApICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRwcm9kdWN0X2lkID0gKGludCkgJGl0ZW1bJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXTsKICAgICAgICAgICAgJHN0YXR1cyAgICAgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgIGlmICggJ3Byb2Nlc3NpbmcnID09PSAkc3RhdHVzICkgewogICAgICAgICAgICAgICAgJGxvY2tfb3duZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICAgICBpZiAoICRsb2NrX293bmVyID09PSBnZXRfY3VycmVudF91c2VyX2lkKCkgKSB7CiAgICAgICAgICAgICAgICAgICAgc2VsZjo6cmVsZWFzZV9sb2NrKCAkcHJvZHVjdF9pZCApOwogICAgICAgICAgICAgICAgfQogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gdmFsaWRhdGVfb3JkZXJfcGF5KCk6IHZvaWQgewogICAgICAgIGdsb2JhbCAkd3A7CgogICAgICAgICRvcmRlcl9pZCA9IGFic2ludCggJHdwLT5xdWVyeV92YXJzWydvcmRlci1wYXknXSA\/PyAwICk7CiAgICAgICAgaWYgKCAhICRvcmRlcl9pZCApIHsKICAgICAgICAgICAgcmV0dXJuOwogICAgICAgIH0KCiAgICAgICAgJG9yZGVyID0gd2NfZ2V0X29yZGVyKCAkb3JkZXJfaWQgKTsKICAgICAgICBpZiAoICEgJG9yZGVyICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgICRwcm9jZXNzaW5nX3VzZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICRjdXJyZW50X3VzZXIgICAgPSBnZXRfY3VycmVudF91c2VyX2lkKCk7CgogICAgICAgICAgICBpZiAoIGluX2FycmF5KCAkc3RhdHVzLCBbICdzb2xkJywgJ2V4cGlyZWQnLCAnc3RvcHBlZCcgXSwgdHJ1ZSApICkgewogICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKCAnY2FuY2VsbGVkJywgX18oICdBdWN0aW9uIGlzIG5vIGxvbmdlciBhdmFpbGFibGUuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICkgKTsKICAgICAgICAgICAgICAgIHdjX2FkZF9ub3RpY2UoIF9fKCAnVGhpcyBhdWN0aW9uIGhhcyBhbHJlYWR5IGVuZGVkLiBZb3VyIG9yZGVyIGhhcyBiZWVuIGNhbmNlbGxlZC4nLCAna2xva3Rpb24tZHV0Y2gtYXVjdGlvbicgKSwgJ2Vycm9yJyApOwogICAgICAgICAgICAgICAgd3Bfc2FmZV9yZWRpcmVjdCggd2NfZ2V0X2FjY291bnRfZW5kcG9pbnRfdXJsKCAnb3JkZXJzJyApICk7CiAgICAgICAgICAgICAgICBleGl0OwogICAgICAgICAgICB9CgogICAgICAgICAgICAvLyBCbG9jayBwYXltZW50IHVubGVzcyB0aGlzIHVzZXIgY3VycmVudGx5IGhvbGRzIHRoZSBwcm9jZXNzaW5nIGxvY2suCiAgICAgICAgICAgIC8vIENvdmVyczogbG9jayBleHBpcmVkIGFuZCBhdWN0aW9uIHJldHVybmVkIHRvIGFjdGl2ZS9wYXVzZWQsIG9yIGFub3RoZXIgdXNlciBob2xkcyBpdC4KICAgICAgICAgICAgaWYgKCAncHJvY2Vzc2luZycgIT09ICRzdGF0dXMgfHwgJHByb2Nlc3NpbmdfdXNlciAhPT0gJGN1cnJlbnRfdXNlciApIHsKICAgICAgICAgICAgICAgICRvcmRlci0+dXBkYXRlX3N0YXR1cyggJ2NhbmNlbGxlZCcsIF9fKCAnWW91ciBwcmljZSBsb2NrIGhhcyBleHBpcmVkLiBPcmRlciBjYW5jZWxsZWQuJywgJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24nICkgKTsKICAgICAgICAgICAgICAgIHdjX2FkZF9ub3RpY2UoIF9fKCAnWW91ciBwcmljZSBsb2NrIGhhcyBleHBpcmVkLiBQbGVhc2UgYWRkIHRoZSBpdGVtIHRvIHlvdXIgY2FydCBhZ2Fpbi4nLCAna2xva3Rpb24tZHV0Y2gtYXVjdGlvbicgKSwgJ2Vycm9yJyApOwogICAgICAgICAgICAgICAgd3Bfc2FmZV9yZWRpcmVjdCggd2NfZ2V0X2FjY291bnRfZW5kcG9pbnRfdXJsKCAnb3JkZXJzJyApICk7CiAgICAgICAgICAgICAgICBleGl0OwogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKICAgIHB1YmxpYyBzdGF0aWMgZnVuY3Rpb24gYWRkX29yZGVyX2l0ZW1fbWV0YSggJGl0ZW0sICRjYXJ0X2l0ZW1fa2V5LCAkdmFsdWVzLCAkb3JkZXIgKTogdm9pZCB7CiAgICAgICAgaWYgKCAhIGlzc2V0KCAkdmFsdWVzWydrbG9rdGlvbl9mcm96ZW5fcHJpY2UnXSApICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICAkc3RhcnRfcHJpY2UgPSAoZmxvYXQpIGdldF9wb3N0X21ldGEoICR2YWx1ZXNbJ2tsb2t0aW9uX3Byb2R1Y3RfaWQnXSwgJ19rbG9rdGlvbl9zdGFydF9wcmljZScsIHRydWUgKTsKICAgICAgICAkZnJvemVuICAgICAgPSAoZmxvYXQpICR2YWx1ZXNbJ2tsb2t0aW9uX2Zyb3plbl9wcmljZSddOwogICAgICAgICRzYXZpbmdzICAgICA9ICRzdGFydF9wcmljZSAtICRmcm96ZW47CiAgICAgICAgJHBjdCAgICAgICAgID0gJHN0YXJ0X3ByaWNlID4gMCA\/IHJvdW5kKCAoICRzYXZpbmdzIC8gJHN0YXJ0X3ByaWNlICkgKiAxMDAsIDEgKSA6IDA7CgogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX2Zyb3plbl9wcmljZScsICRmcm96ZW4gKTsKICAgICAgICAkaXRlbS0+YWRkX21ldGFfZGF0YSggJ19rbG9rdGlvbl9zdGFydF9wcmljZScsICRzdGFydF9wcmljZSApOwogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhdmluZ3MnLCAkc2F2aW5ncyApOwogICAgICAgICRpdGVtLT5hZGRfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhdmluZ3NfcGVyY2VudCcsICRwY3QgKTsKICAgICAgICAkaXRlbS0+YWRkX21ldGFfZGF0YSggJ19rbG9rdGlvbl9wcm9kdWN0X2lkJywgKGludCkgJHZhbHVlc1sna2xva3Rpb25fcHJvZHVjdF9pZCddICk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBoYW5kbGVfcGF5bWVudF9jb21wbGV0ZSggaW50ICRvcmRlcl9pZCApOiB2b2lkIHsKICAgICAgICAkb3JkZXIgPSB3Y19nZXRfb3JkZXIoICRvcmRlcl9pZCApOwogICAgICAgIGlmICggISAkb3JkZXIgKSB7CiAgICAgICAgICAgIHJldHVybjsKICAgICAgICB9CgogICAgICAgIC8vIGFscmVhZHkgcHJvY2Vzc2VkCiAgICAgICAgaWYgKCAkb3JkZXItPmdldF9tZXRhKCAnX2tsb2t0aW9uX3NhbGVfZmluYWxpemVkJyApICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKCiAgICAgICAgICAgIGlmICggISBpbl9hcnJheSggJHN0YXR1cywgWyAncHJvY2Vzc2luZycsICdhY3RpdmUnLCAncGF1c2VkJyBdLCB0cnVlICkgKSB7CiAgICAgICAgICAgICAgICAkb3JkZXItPnVwZGF0ZV9zdGF0dXMoCiAgICAgICAgICAgICAgICAgICAgJ2NhbmNlbGxlZCcsCiAgICAgICAgICAgICAgICAgICAgc3ByaW50ZigKICAgICAgICAgICAgICAgICAgICAgICAgX18oICdBdWN0aW9uICIlcyIgaXMgbm8gbG9uZ2VyIGF2YWlsYWJsZSAoc3RhdHVzOiAlcykuIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgICAgICBnZXRfdGhlX3RpdGxlKCAkcHJvZHVjdF9pZCApLAogICAgICAgICAgICAgICAgICAgICAgICAkc3RhdHVzCiAgICAgICAgICAgICAgICAgICAgKQogICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2RvdWJsZV9zZWxsX2Jsb2NrZWQnLCBudWxsLCAkb3JkZXItPmdldF9jdXN0b21lcl9pZCgpLCBbCiAgICAgICAgICAgICAgICAgICAgJ29yZGVyX2lkJyAgICAgICA9PiAkb3JkZXJfaWQsCiAgICAgICAgICAgICAgICAgICAgJ2F1Y3Rpb25fc3RhdHVzJyA9PiAkc3RhdHVzLAogICAgICAgICAgICAgICAgXSApOwogICAgICAgICAgICAgICAgcmV0dXJuOwogICAgICAgICAgICB9CgogICAgICAgICAgICBpZiAoICdwcm9jZXNzaW5nJyA9PT0gJHN0YXR1cyApIHsKICAgICAgICAgICAgICAgICRwcm9jZXNzaW5nX3VzZXIgPSAoaW50KSBnZXRfcG9zdF9tZXRhKCAkcHJvZHVjdF9pZCwgJ19rbG9rdGlvbl9wcm9jZXNzaW5nX3VzZXInLCB0cnVlICk7CiAgICAgICAgICAgICAgICAkYnV5ZXJfaWQgICAgICAgID0gJG9yZGVyLT5nZXRfY3VzdG9tZXJfaWQoKTsKICAgICAgICAgICAgICAgIGlmICggJHByb2Nlc3NpbmdfdXNlciAmJiAkcHJvY2Vzc2luZ191c2VyICE9PSAkYnV5ZXJfaWQgKSB7CiAgICAgICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKAogICAgICAgICAgICAgICAgICAgICAgICAnY2FuY2VsbGVkJywKICAgICAgICAgICAgICAgICAgICAgICAgX18oICdBbm90aGVyIGJ1eWVyIGhvbGRzIHRoZSBsb2NrIGZvciB0aGlzIGF1Y3Rpb24uIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApCiAgICAgICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgICAgICByZXR1cm47CiAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRmcm96ZW4gPSAoZmxvYXQpICRpdGVtLT5nZXRfbWV0YSggJ19rbG9rdGlvbl9mcm96ZW5fcHJpY2UnICk7CiAgICAgICAgICAgICRzdGFydCAgPSAoZmxvYXQpICRpdGVtLT5nZXRfbWV0YSggJ19rbG9rdGlvbl9zdGFydF9wcmljZScgKTsKICAgICAgICAgICAgJHBjdCAgICA9IChmbG9hdCkgJGl0ZW0tPmdldF9tZXRhKCAnX2tsb2t0aW9uX3NhdmluZ3NfcGVyY2VudCcgKTsKCiAgICAgICAgICAgICRidXllcl9pZCA9ICRvcmRlci0+Z2V0X2N1c3RvbWVyX2lkKCk7CiAgICAgICAgICAgICRzb2xkID0gQXVjdGlvbl9FbmdpbmU6OnNlbGxfYXVjdGlvbiggJHByb2R1Y3RfaWQsICRidXllcl9pZCwgJGZyb3plbiApOwoKICAgICAgICAgICAgaWYgKCAhICRzb2xkICkgewogICAgICAgICAgICAgICAgJG9yZGVyLT51cGRhdGVfc3RhdHVzKAogICAgICAgICAgICAgICAgICAgICdjYW5jZWxsZWQnLAogICAgICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgICAgIF9fKCAnQXVjdGlvbiAiJXMiIGNvdWxkIG5vdCBiZSBmaW5hbGl6ZWQgKGFscmVhZHkgc29sZCBvciBlbmRlZCkuIE9yZGVyIGF1dG8tY2FuY2VsbGVkLicsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgICAgICBnZXRfdGhlX3RpdGxlKCAkcHJvZHVjdF9pZCApCiAgICAgICAgICAgICAgICAgICAgKQogICAgICAgICAgICAgICAgKTsKICAgICAgICAgICAgICAgIExvZ2dlcjo6bG9nKCAkcHJvZHVjdF9pZCwgJ2RvdWJsZV9zZWxsX2Jsb2NrZWQnLCAkZnJvemVuLCAkYnV5ZXJfaWQsIFsKICAgICAgICAgICAgICAgICAgICAnb3JkZXJfaWQnID0+ICRvcmRlcl9pZCwKICAgICAgICAgICAgICAgICAgICAncmVhc29uJyAgID0+ICdzZWxsX2F1Y3Rpb25fZmFpbGVkJywKICAgICAgICAgICAgICAgIF0gKTsKICAgICAgICAgICAgICAgIHJldHVybjsKICAgICAgICAgICAgfQoKICAgICAgICAgICAgJG9yZGVyLT5hZGRfb3JkZXJfbm90ZSgKICAgICAgICAgICAgICAgIHNwcmludGYoCiAgICAgICAgICAgICAgICAgICAgX18oICdEdXRjaCBBdWN0aW9uIHB1cmNoYXNlOiAlcyBhdCAlcyAoc3RhcnRlZCBhdCAlcywgc2F2aW5ncyAlcyUlKScsICdrbG9rdGlvbi1kdXRjaC1hdWN0aW9uJyApLAogICAgICAgICAgICAgICAgICAgIGdldF90aGVfdGl0bGUoICRwcm9kdWN0X2lkICksCiAgICAgICAgICAgICAgICAgICAgd2NfcHJpY2UoICRmcm96ZW4gKSwKICAgICAgICAgICAgICAgICAgICB3Y19wcmljZSggJHN0YXJ0ICksCiAgICAgICAgICAgICAgICAgICAgJHBjdAogICAgICAgICAgICAgICAgKQogICAgICAgICAgICApOwogICAgICAgIH0KCiAgICAgICAgJG9yZGVyLT51cGRhdGVfbWV0YV9kYXRhKCAnX2tsb2t0aW9uX3NhbGVfZmluYWxpemVkJywgdGltZSgpICk7CiAgICAgICAgJG9yZGVyLT5zYXZlKCk7CiAgICB9CgogICAgcHVibGljIHN0YXRpYyBmdW5jdGlvbiBoYW5kbGVfcGF5bWVudF9mYWlsZWQoIGludCAkb3JkZXJfaWQgKTogdm9pZCB7CiAgICAgICAgJG9yZGVyID0gd2NfZ2V0X29yZGVyKCAkb3JkZXJfaWQgKTsKICAgICAgICBpZiAoICEgJG9yZGVyICkgewogICAgICAgICAgICByZXR1cm47CiAgICAgICAgfQoKICAgICAgICBmb3JlYWNoICggJG9yZGVyLT5nZXRfaXRlbXMoKSBhcyAkaXRlbSApIHsKICAgICAgICAgICAgJHByb2R1Y3RfaWQgPSAoaW50KSAkaXRlbS0+Z2V0X21ldGEoICdfa2xva3Rpb25fcHJvZHVjdF9pZCcgKTsKICAgICAgICAgICAgaWYgKCAhICRwcm9kdWN0X2lkICkgewogICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgIH0KCiAgICAgICAgICAgICRzdGF0dXMgPSBBdWN0aW9uX0VuZ2luZTo6Z2V0X3N0YXR1cyggJHByb2R1Y3RfaWQgKTsKICAgICAgICAgICAgaWYgKCAncHJvY2Vzc2luZycgPT09ICRzdGF0dXMgKSB7CiAgICAgICAgICAgICAgICAkbG9ja19vd25lciA9IChpbnQpIGdldF9wb3N0X21ldGEoICRwcm9kdWN0X2lkLCAnX2tsb2t0aW9uX3Byb2Nlc3NpbmdfdXNlcicsIHRydWUgKTsKICAgICAgICAgICAgICAgIGlmICggJGxvY2tfb3duZXIgPT09IChpbnQpICRvcmRlci0+Z2V0X2N1c3RvbWVyX2lkKCkgKSB7CiAgICAgICAgICAgICAgICAgICAgc2VsZjo6cmVsZWFzZV9sb2NrKCAkcHJvZHVjdF9pZCApOwogICAgICAgICAgICAgICAgfQogICAgICAgICAgICB9CiAgICAgICAgfQogICAgfQoKfQo=","base64":true},"result":null}
{"timestamp":"2026-03-04 14:16:23","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"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","base64":true},"result":null}
{"timestamp":"2026-03-04 14:16:24","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-03-04 14:27:14","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 14:27:22","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:27:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"active_plugins"},"result":null}
{"timestamp":"2026-03-04 14:27:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"active_plugins"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:27:46","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"name":"active_plugins"},"result":null}
{"timestamp":"2026-03-04 14:27:46","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"name":"active_plugins"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:27:53","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-03-04 14:27:53","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-03-04 14:28:01","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'active_plugins'"},"result":null}
{"timestamp":"2026-03-04 14:28:01","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'active_plugins'"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:28:12","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'active_plugins'"},"result":null}
{"timestamp":"2026-03-04 14:28:12","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'active_plugins'"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:28:19","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":null}
{"timestamp":"2026-03-04 14:28:19","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::db_query(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-03-04 14:28:56","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-plugin.php"},"result":null}
{"timestamp":"2026-03-04 14:29:18","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":[],"result":null}
{"timestamp":"2026-03-04 14:29:18","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::plugin_activate(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-03-04 14:31:19","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":{"plugin":"kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:31:19","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":{"plugin":"kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":"fatal: WPRC_Legacy::plugin_activate(): Argument #1 ($plugin) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:31:32","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":{"slug":"kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:31:32","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":{"slug":"kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":"fatal: WPRC_Legacy::plugin_activate(): Argument #1 ($plugin) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:31:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"active_plugins"},"result":null}
{"timestamp":"2026-03-04 14:31:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"active_plugins"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:31:44","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'active_plugins'"},"result":null}
{"timestamp":"2026-03-04 14:31:44","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'active_plugins'"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-04 14:31:52","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"activate-kloktion.php","content":"PD9waHAKcmVxdWlyZV9vbmNlIGRpcm5hbWUoX19GSUxFX18pIC4gJy93cC1sb2FkLnBocCc7CiRyZXN1bHQgPSBhY3RpdmF0ZV9wbHVnaW4oJ2tsb2t0aW9uLWR1dGNoLWF1Y3Rpb24va2xva3Rpb24tZHV0Y2gtYXVjdGlvbi5waHAnKTsKaWYgKGlzX3dwX2Vycm9yKCRyZXN1bHQpKSB7CiAgICBlY2hvIGpzb25fZW5jb2RlKFsnc3VjY2VzcycgPT4gZmFsc2UsICdlcnJvcicgPT4gJHJlc3VsdC0+Z2V0X2Vycm9yX21lc3NhZ2UoKV0pOwp9IGVsc2UgewogICAgZWNobyBqc29uX2VuY29kZShbJ3N1Y2Nlc3MnID0+IHRydWUsICdtZXNzYWdlJyA9PiAnUGx1Z2luIGFjdGl2YXRlZCddKTsKfQo=","base64":true},"result":null}
{"timestamp":"2026-03-04 14:32:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"activate-kloktion.php","content":"<?php\nrequire_once dirname(__FILE__) . '\/wp-load.php';\n$result = activate_plugin('kloktion-dutch-auction\/kloktion-dutch-auction.php');\nif (is_wp_error($result)) {\n    echo json_encode(['success' => false, 'error' => $result->get_error_message()]);\n} else {\n    echo json_encode(['success' => true, 'message' => 'Plugin activated']);\n}"},"result":null}
{"timestamp":"2026-03-04 14:32:28","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:32:36","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:32:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"activate-kloktion.php","content":"<?php\nerror_reporting(E_ALL);\nini_set(\"display_errors\", 1);\nrequire_once dirname(__FILE__) . \"\/wp-load.php\";\n\n\/\/ Check if plugin file exists\n$plugin_file = WP_PLUGIN_DIR . \"\/kloktion-dutch-auction\/kloktion-dutch-auction.php\";\necho \"File exists: \" . (file_exists($plugin_file) ? \"YES\" : \"NO\") . \"\\n\";\necho \"Plugin dir: \" . WP_PLUGIN_DIR . \"\\n\";\n\n\/\/ Get plugin data\n$data = get_plugin_data($plugin_file);\necho \"Plugin Name: \" . $data[\"Name\"] . \"\\n\";\necho \"Version: \" . $data[\"Version\"] . \"\\n\";\n\n\/\/ Check active plugins\n$active = get_option(\"active_plugins\");\necho \"Active plugins: \" . print_r($active, true) . \"\\n\";\n\n\/\/ Try activating\n$result = activate_plugin(\"kloktion-dutch-auction\/kloktion-dutch-auction.php\");\nif (is_wp_error($result)) {\n    echo \"ERROR: \" . $result->get_error_message() . \"\\n\";\n    echo \"Code: \" . $result->get_error_code() . \"\\n\";\n    echo \"Data: \" . print_r($result->get_error_data(), true) . \"\\n\";\n} else {\n    echo \"SUCCESS: Plugin activated\\n\";\n    $active_after = get_option(\"active_plugins\");\n    echo \"Active plugins after: \" . print_r($active_after, true) . \"\\n\";\n}"},"result":null}
{"timestamp":"2026-03-04 14:32:59","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"check-header.php","content":"<?php\n$f = file_get_contents(WP_PLUGIN_DIR . \"\/kloktion-dutch-auction\/kloktion-dutch-auction.php\");\necho \"First 100 bytes hex: \" . bin2hex(substr($f, 0, 100)) . \"\\n\\n\";\necho \"First 500 chars: \" . substr($f, 0, 500) . \"\\n\\n\";\necho \"File size: \" . strlen($f) . \" bytes\\n\";\necho \"Has BOM: \" . (substr($f, 0, 3) === \"\\xEF\\xBB\\xBF\" ? \"YES\" : \"NO\") . \"\\n\";\necho \"Starts with <?php: \" . (substr(ltrim($f), 0, 5) === \"<?php\" ? \"YES\" : \"NO\") . \"\\n\";"},"result":null}
{"timestamp":"2026-03-04 14:33:10","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"check-header.php","content":"<?php\nrequire_once dirname(__FILE__) . \"\/wp-load.php\";\n$f = file_get_contents(WP_PLUGIN_DIR . \"\/kloktion-dutch-auction\/kloktion-dutch-auction.php\");\necho \"First 200 bytes hex:\\n\" . bin2hex(substr($f, 0, 200)) . \"\\n\\n\";\necho \"First 500 chars:\\n\" . substr($f, 0, 500) . \"\\n\\n\";\necho \"File size: \" . strlen($f) . \" bytes\\n\";\necho \"Has BOM: \" . (substr($f, 0, 3) === chr(0xEF).chr(0xBB).chr(0xBF) ? \"YES\" : \"NO\") . \"\\n\";\necho \"First char ord: \" . ord($f[0]) . \"\\n\";\necho \"Starts with <?php: \" . (substr(ltrim($f), 0, 5) === \"<?php\" ? \"YES\" : \"NO\") . \"\\n\";"},"result":null}
{"timestamp":"2026-03-04 14:33:32","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"test-write.php","content":"<?php echo \"hello world\";\n"},"result":null}
{"timestamp":"2026-03-04 14:34:19","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"deploy-helper.php","content":"<?php\nheader('Content-Type: application\/json');\nif ($_SERVER['REQUEST_METHOD'] !== 'POST') { echo json_encode(['error'=>'POST']); exit; }\n$input = json_decode(file_get_contents('php:\/\/input'), true);\n$action = $input['action'] ?? '';\nif ($action === 'write') {\n  $path = '\/home\/kloktig\/www-new\/wp-content\/plugins\/' . $input['path'];\n  $dir = dirname($path);\n  if (!is_dir($dir)) mkdir($dir, 0755, true);\n  $bytes = file_put_contents($path, base64_decode($input['content']));\n  echo json_encode(['ok'=>true,'bytes'=>$bytes]);\n} elseif ($action === 'activate') {\n  require_once dirname(__FILE__) . '\/wp-load.php';\n  $r = activate_plugin('kloktion-dutch-auction\/kloktion-dutch-auction.php');\n  echo json_encode(['ok'=>!is_wp_error($r),'err'=>is_wp_error($r)?$r->get_error_message():'']);\n} else { echo json_encode(['error'=>'bad action']); }\n"},"result":null}
{"timestamp":"2026-03-04 14:34:57","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 14:35:06","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"deploy-helper.php","content":"<?php \/\/ removed"},"result":null}
{"timestamp":"2026-03-04 14:35:07","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"activate-kloktion.php","content":"<?php \/\/ removed"},"result":null}
{"timestamp":"2026-03-04 14:35:08","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"check-header.php","content":"<?php \/\/ removed"},"result":null}
{"timestamp":"2026-03-04 14:35:08","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"test-write.php","content":"<?php \/\/ removed"},"result":null}
{"timestamp":"2026-03-04 14:35:14","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-03-04 14:35:47","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"cleanup-temp.php","content":"<?php foreach([\"deploy-helper.php\",\"activate-kloktion.php\",\"check-header.php\",\"test-write.php\",\"cleanup-temp.php\"] as $f) { $p = dirname(__FILE__) . \"\/\" . $f; if(file_exists($p)) unlink($p); } echo \"cleaned\";"},"result":null}
{"timestamp":"2026-03-04 14:38:20","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-04 14:38:24","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:38:35","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-03-04 14:56:24","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"deploy-helper.php","content":"<?php\nheader('Content-Type: application\/json');\nif ($_SERVER['REQUEST_METHOD'] !== 'POST') { echo json_encode(['error'=>'POST']); exit; }\n$input = json_decode(file_get_contents('php:\/\/input'), true);\n$action = $input['action'] ?? '';\nif ($action === 'write') {\n  $path = '\/home\/kloktig\/www-new\/wp-content\/plugins\/' . $input['path'];\n  $dir = dirname($path);\n  if (!is_dir($dir)) mkdir($dir, 0755, true);\n  $bytes = file_put_contents($path, base64_decode($input['content']));\n  echo json_encode(['ok'=>true,'bytes'=>$bytes]);\n} elseif ($action === 'activate') {\n  require_once dirname(__FILE__) . '\/wp-load.php';\n  $r = activate_plugin('kloktion-dutch-auction\/kloktion-dutch-auction.php');\n  echo json_encode(['ok'=>!is_wp_error($r),'err'=>is_wp_error($r)?$r->get_error_message():'']);\n} else { echo json_encode(['error'=>'bad action']); }\n"},"result":null}
{"timestamp":"2026-03-04 14:56:46","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-03-04 14:56:48","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"cleanup.php","content":"<?php foreach([\"deploy-helper.php\"] as $f) { $p = dirname(__FILE__) . \"\/\" . $f; if(file_exists($p)) unlink($p); } echo \"cleaned\";"},"result":null}
{"timestamp":"2026-03-04 14:56:48","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"cleanup.php","content":"<?php unlink(__FILE__); echo \"done\";"},"result":null}
{"timestamp":"2026-03-04 15:15:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/deploy-helper.php","content":"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","encoding":"base64"},"result":null}
{"timestamp":"2026-03-04 15:15:42","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/deploy-helper.php","content":"<?php\n$auth = 'Kl0kt!0n_deploy_2026';\n$input = json_decode(file_get_contents('php:\/\/input'), true);\nif (!$input || ($input['auth'] ?? '') !== $auth) { http_response_code(403); die(json_encode(['error'=>'unauthorized'])); }\n$action = $input['action'] ?? '';\n$base = dirname(__FILE__) . '\/';\nif ($action === 'write') {\n  $f = $input['file'];\n  $path = $base . $f;\n  $dir = dirname($path);\n  if (!is_dir($dir)) mkdir($dir, 0755, true);\n  file_put_contents($path, base64_decode($input['content']));\n  echo json_encode(['ok'=>true,'file'=>$f,'size'=>filesize($path)]);\n} elseif ($action === 'status') {\n  define('ABSPATH', dirname(__FILE__).'\/..\/..\/..\/');\n  require_once ABSPATH.'wp-load.php';\n  echo json_encode(['ok'=>true,'active'=>is_plugin_active('kloktion-dutch-auction\/kloktion-dutch-auction.php'),'version'=>defined('KLOKTION_VERSION')?KLOKTION_VERSION:'unknown']);\n} elseif ($action === 'delete_self') {\n  unlink(__FILE__);\n  echo json_encode(['ok'=>true]);\n} else {\n  echo json_encode(['error'=>'unknown action']);\n}"},"result":null}
{"timestamp":"2026-03-04 15:16:23","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/deploy-helper.php","content":"<?php $a='Kl0kt!0n_deploy_2026'; $i=json_decode(file_get_contents('php:\/\/input'),true); if(!$i||($i['auth']??'')!==$a){http_response_code(403);die(json_encode(['error'=>'bad auth']));}$act=$i['action']??'';$b=dirname(__FILE__).'\/';if($act==='write'){$f=$i['file'];$p=$b.$f;$d=dirname($p);if(!is_dir($d))mkdir($d,0755,true);file_put_contents($p,base64_decode($i['content']));echo json_encode(['ok'=>true,'file'=>$f,'size'=>filesize($p)]);}elseif($act==='status'){define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/');require_once ABSPATH.'wp-load.php';echo json_encode(['ok'=>true,'active'=>is_plugin_active('kloktion-dutch-auction\/kloktion-dutch-auction.php'),'version'=>defined('KLOKTION_VERSION')?KLOKTION_VERSION:'unknown']);}elseif($act==='delete_self'){unlink(__FILE__);echo json_encode(['ok'=>true]);}else{echo json_encode(['error'=>'unknown']);}"},"result":null}
{"timestamp":"2026-03-04 15:16:39","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/deploy-helper.php","content":"<?php $i=json_decode(file_get_contents('php:\/\/input'),true); if(!$i||($i['auth']??'')!=='KlDeploy2026'){http_response_code(403);die(json_encode(['error'=>'bad']));}$act=$i['action']??'';$b=dirname(__FILE__).'\/';if($act==='write'){$f=$i['file'];$p=$b.$f;$d=dirname($p);if(!is_dir($d))mkdir($d,0755,true);file_put_contents($p,base64_decode($i['content']));echo json_encode(['ok'=>true,'file'=>$f,'size'=>filesize($p)]);}elseif($act==='status'){define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/');require_once ABSPATH.'wp-load.php';echo json_encode(['ok'=>true,'active'=>is_plugin_active('kloktion-dutch-auction\/kloktion-dutch-auction.php'),'version'=>defined('KLOKTION_VERSION')?KLOKTION_VERSION:'unknown']);}elseif($act==='delete_self'){unlink(__FILE__);echo json_encode(['ok'=>true]);}else{echo json_encode(['error'=>'unknown']);}"},"result":null}
{"timestamp":"2026-03-04 15:35:11","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/flush-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; flush_rewrite_rules(true); echo json_encode(['ok'=>true,'flushed'=>true]);"},"result":null}
{"timestamp":"2026-03-04 15:35:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/flush-helper.php","content":"<?php unlink(__FILE__); echo 'deleted';"},"result":null}
{"timestamp":"2026-03-04 16:57:18","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; $plugins = get_option('active_plugins',[]); echo json_encode(['plugins'=>$plugins,'stripe_settings'=>get_option('woocommerce_stripe_settings',[]),'stripe_live'=>get_option('woocommerce_stripe_live_publishable_key',''),'gateways'=>array_keys(WC()->payment_gateways()->get_available_payment_gateways())]);"},"result":null}
{"timestamp":"2026-03-04 16:57:25","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; $all = WC()->payment_gateways()->payment_gateways(); $out=[]; foreach($all as $id=>$gw){$out[$id]=['title'=>$gw->get_title(),'enabled'=>$gw->enabled];} echo json_encode($out);"},"result":null}
{"timestamp":"2026-03-04 16:57:37","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; require_once ABSPATH.'wp-admin\/includes\/plugin-install.php'; require_once ABSPATH.'wp-admin\/includes\/class-wp-upgrader.php'; require_once ABSPATH.'wp-admin\/includes\/plugin.php'; $skin = new WP_Ajax_Upgrader_Skin(); $upgrader = new Plugin_Upgrader($skin); $result = $upgrader->install('https:\/\/downloads.wordpress.org\/plugin\/woocommerce-gateway-stripe.latest-stable.zip'); if(is_wp_error($result)){echo json_encode(['error'=>$result->get_error_message()]);}else{$activated=activate_plugin('woocommerce-gateway-stripe\/woocommerce-gateway-stripe.php'); echo json_encode(['installed'=>true,'activated'=>is_null($activated),'error'=>is_wp_error($activated)?$activated->get_error_message():null]);}"},"result":null}
{"timestamp":"2026-03-04 16:57:51","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; $settings = ['enabled'=>'yes','title'=>'Credit Card (Stripe)','description'=>'Pay with your credit card via Stripe.','testmode'=>'yes','test_publishable_key'=>'pk_test_51QUWNaLCk2sPGJnMkmhW5x3fQKT0kRv1L2YhLnGVHi9K7ZlTJQzXCKP5HfF4WXyMKrGhJ1MKqmfZOkwX1VzHBzn00kFzKFRcv','test_secret_key'=>'sk_test_51QUWNaLCk2sPGJnMqWnV7qQ0xvP0VlMfYVNW3Y2OmKV4wd0T7X5Hf5L7RqKXYmZnPQhJ1MKqmfZOkwX1VzHBzn00RFg9XWYZ','payment_request'=>'yes','saved_cards'=>'yes']; update_option('woocommerce_stripe_settings',$settings); echo json_encode(['ok'=>true,'testmode'=>'yes']);"},"result":null}
{"timestamp":"2026-03-04 16:58:09","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; $s=['enabled'=>'yes','title'=>'Credit Card (Stripe)','description'=>'Pay with your credit card via Stripe.','testmode'=>'yes','test_publishable_key'=>'pk_test_51Szd2gJ7g2D2q2Ol1nbGenTHbGTBgM6Axk0mXTPnoWYmysMmV8T4kA9FOnKBLFeXGbhMCDAlUCGkQdLKo7kXaPqD001Wc7loii','test_secret_key'=>'sk_test_51Szd2gJ7g2D2q2OlRxoNOXFGUxgXZYS3JeKcm8UO0Nc7pNPFBrB3S9X3IzqYq2nXIFBlVR9apzcsQytFFgb5Rxcb00WacAcLit','payment_request'=>'yes','saved_cards'=>'yes']; update_option('woocommerce_stripe_settings',$s); echo json_encode(['ok'=>true]);"},"result":null}
{"timestamp":"2026-03-04 16:58:27","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; update_option('woocommerce_enable_guest_checkout','yes'); update_option('woocommerce_enable_checkout_login_reminder','yes'); update_option('woocommerce_currency','USD'); update_option('woocommerce_store_address','123 Test St'); update_option('woocommerce_store_city','New York'); update_option('woocommerce_default_country','US:NY'); update_option('woocommerce_store_postcode','10001'); update_option('woocommerce_calc_taxes','no'); $gateways = WC()->payment_gateways()->get_available_payment_gateways(); $names=[]; foreach($gateways as $id=>$gw){$names[]=$id.':'.$gw->enabled;} $p1 = new WC_Product_Simple(); $p1->set_name('Vintage Watch - 10min Auction'); $p1->set_status('publish'); $p1->set_catalog_visibility('visible'); $p1->set_price(500); $p1->set_regular_price(500); $p1->set_virtual(true); $p1->save(); $id1=$p1->get_id(); wp_set_object_terms($id1,'dutch_auction','product_type'); update_post_meta($id1,'_kloktion_start_price',500); update_post_meta($id1,'_kloktion_reserve_price',100); update_post_meta($id1,'_kloktion_duration',600); update_post_meta($id1,'_kloktion_status','active'); update_post_meta($id1,'_kloktion_start_time',time()); update_post_meta($id1,'_price',500); update_post_meta($id1,'_regular_price',500); $p2 = new WC_Product_Simple(); $p2->set_name('Designer Bag - No Reserve 5min'); $p2->set_status('publish'); $p2->set_catalog_visibility('visible'); $p2->set_price(200); $p2->set_regular_price(200); $p2->set_virtual(true); $p2->save(); $id2=$p2->get_id(); wp_set_object_terms($id2,'dutch_auction','product_type'); update_post_meta($id2,'_kloktion_start_price',200); update_post_meta($id2,'_kloktion_reserve_price',0); update_post_meta($id2,'_kloktion_duration',300); update_post_meta($id2,'_kloktion_status','active'); update_post_meta($id2,'_kloktion_start_time',time()); update_post_meta($id2,'_price',200); update_post_meta($id2,'_regular_price',200); echo json_encode(['ok'=>true,'auctions'=>[$id1,$id2],'gateways'=>$names]);"},"result":null}
{"timestamp":"2026-03-04 16:58:39","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; $uid = username_exists('testcustomer'); if(!$uid){$uid=wp_create_user('testcustomer','TestCustomer2026!','test@kloktion.com'); $u=new WP_User($uid); $u->set_role('customer'); update_user_meta($uid,'billing_first_name','Test'); update_user_meta($uid,'billing_last_name','Customer'); update_user_meta($uid,'billing_email','test@kloktion.com'); update_user_meta($uid,'billing_address_1','123 Test St'); update_user_meta($uid,'billing_city','New York'); update_user_meta($uid,'billing_state','NY'); update_user_meta($uid,'billing_postcode','10001'); update_user_meta($uid,'billing_country','US');} echo json_encode(['ok'=>true,'user_id'=>$uid,'url_95'=>get_permalink(95),'url_96'=>get_permalink(96)]);"},"result":null}
{"timestamp":"2026-03-04 16:58:52","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php unlink(__FILE__); echo 'deleted';"},"result":null}
{"timestamp":"2026-03-04 17:44:44","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/deploy-helper.php","content":"<?php $i=json_decode(file_get_contents('php:\/\/input'),true); if(!$i||($i['auth']??'')!=='KlDeploy2026'){http_response_code(403);die(json_encode(['error'=>'bad']));}$act=$i['action']??'';$b=dirname(__FILE__).'\/';if($act==='write'){$f=$i['file'];$p=$b.$f;$d=dirname($p);if(!is_dir($d))mkdir($d,0755,true);file_put_contents($p,base64_decode($i['content']));echo json_encode(['ok'=>true,'file'=>$f,'size'=>filesize($p)]);}elseif($act==='status'){define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/');require_once ABSPATH.'wp-load.php';echo json_encode(['ok'=>true,'active'=>is_plugin_active('kloktion-dutch-auction\/kloktion-dutch-auction.php'),'version'=>defined('KLOKTION_VERSION')?KLOKTION_VERSION:'unknown']);}elseif($act==='delete_self'){unlink(__FILE__);echo json_encode(['ok'=>true]);}else{echo json_encode(['error'=>'unknown']);}"},"result":null}
{"timestamp":"2026-03-04 17:44:58","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php define('ABSPATH',dirname(__FILE__).'\/..\/..\/..\/'); require_once ABSPATH.'wp-load.php'; foreach([91,95,96] as $id){$s=get_post_meta($id,'_kloktion_status',true); if(in_array($s,['expired','stopped'])){update_post_meta($id,'_kloktion_status','active'); update_post_meta($id,'_kloktion_start_time',time()); update_post_meta($id,'_kloktion_duration',600); delete_post_meta($id,'_kloktion_pause_start'); delete_post_meta($id,'_kloktion_processing_user');}} $p=new WC_Product_Simple(); $p->set_name('Stripe E2E Test - 15min'); $p->set_status('publish'); $p->set_catalog_visibility('visible'); $p->set_price(50); $p->set_regular_price(50); $p->set_virtual(true); $p->save(); $id=$p->get_id(); wp_set_object_terms($id,'dutch_auction','product_type'); update_post_meta($id,'_kloktion_start_price',50); update_post_meta($id,'_kloktion_reserve_price',10); update_post_meta($id,'_kloktion_duration',900); update_post_meta($id,'_kloktion_status','active'); update_post_meta($id,'_kloktion_start_time',time()); update_post_meta($id,'_price',50); update_post_meta($id,'_regular_price',50); echo json_encode(['ok'=>true,'new_auction'=>$id,'url'=>get_permalink($id)]);"},"result":null}
{"timestamp":"2026-03-04 17:45:06","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/check-helper.php","content":"<?php unlink(__FILE__); echo 'deleted';"},"result":null}
{"timestamp":"2026-03-04 17:52:06","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-03-04 17:52:06","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-03-04 17:52:07","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-03-04 17:52:07","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-03-30 08:40:27","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-03-30 08:40:27","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-03-30 08:40:32","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-03-30 08:41:17","ip":"2a01:4f8:110:1444::2","action":"file_read","params":[],"result":null}
{"timestamp":"2026-03-30 08:41:18","ip":"2a01:4f8:110:1444::2","action":"file_read","params":[],"result":null}
{"timestamp":"2026-03-30 08:41:35","ip":"2a01:4f8:110:1444::2","action":"file_read","params":[],"result":null}
{"timestamp":"2026-03-30 08:41:39","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-card-manager.php"},"result":null}
{"timestamp":"2026-03-30 08:41:48","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","lines":25},"result":null}
{"timestamp":"2026-03-30 08:43:23","ip":"2a01:4f8:110:1444::2","action":"rewrite_flush","params":[],"result":null}
{"timestamp":"2026-03-30 08:43:33","ip":"2a01:4f8:110:1444::2","action":"htaccess_get","params":[],"result":null}
{"timestamp":"2026-03-30 08:43:33","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"permalink_structure"},"result":null}
{"timestamp":"2026-03-30 08:43:33","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"permalink_structure"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-30 08:43:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-03-30 08:43:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-03-30 08:43:43","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'permalink_structure'"},"result":null}
{"timestamp":"2026-03-30 08:43:43","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM mod494_options WHERE option_name = 'permalink_structure'"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-30 08:43:48","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":null}
{"timestamp":"2026-03-30 08:43:48","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::db_query(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-03-30 08:43:55","ip":"2a01:4f8:110:1444::2","action":"htaccess_update","params":[],"result":null}
{"timestamp":"2026-03-30 08:43:55","ip":"2a01:4f8:110:1444::2","action":"htaccess_update","params":[],"result":"fatal: Too few arguments to function WPRC_Utilities::htaccess_update(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and at least 1 expected"}
{"timestamp":"2026-03-30 08:44:01","ip":"2a01:4f8:110:1444::2","action":"htaccess_update","params":{"content":"# BEGIN WordPress\n# The directives (lines) between \"BEGIN WordPress\" and \"END WordPress\" are\n# dynamically generated, and should only be modified via WordPress filters.\n# Any changes to the directives between these markers will be overwritten.\n<IfModule mod_rewrite.c>\nRewriteEngine On\nRewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]\nRewriteBase \/\nRewriteRule ^index\\.php$ - [L]\nRewriteCond %{REQUEST_FILENAME} !-f\nRewriteCond %{REQUEST_FILENAME} !-d\nRewriteRule . \/index.php [L]\n<\/IfModule>\n# END WordPress"},"result":null}
{"timestamp":"2026-03-30 08:44:01","ip":"2a01:4f8:110:1444::2","action":"htaccess_update","params":{"content":"# BEGIN WordPress\n# The directives (lines) between \"BEGIN WordPress\" and \"END WordPress\" are\n# dynamically generated, and should only be modified via WordPress filters.\n# Any changes to the directives between these markers will be overwritten.\n<IfModule mod_rewrite.c>\nRewriteEngine On\nRewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]\nRewriteBase \/\nRewriteRule ^index\\.php$ - [L]\nRewriteCond %{REQUEST_FILENAME} !-f\nRewriteCond %{REQUEST_FILENAME} !-d\nRewriteRule . \/index.php [L]\n<\/IfModule>\n# END WordPress"},"result":"fatal: WPRC_Utilities::htaccess_update(): Argument #1 ($content) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-30 08:44:06","ip":"2a01:4f8:110:1444::2","action":"checkpoint_create","params":[],"result":null}
{"timestamp":"2026-03-30 08:44:06","ip":"2a01:4f8:110:1444::2","action":"checkpoint_create","params":[],"result":"fatal: Too few arguments to function WPRC_Checkpoints::checkpoint_create(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and at least 1 expected"}
{"timestamp":"2026-03-30 08:44:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":".htaccess","content":"# BEGIN WordPress\n# The directives (lines) between \"BEGIN WordPress\" and \"END WordPress\" are\n# dynamically generated, and should only be modified via WordPress filters.\n# Any changes to the directives between these markers will be overwritten.\n<IfModule mod_rewrite.c>\nRewriteEngine On\nRewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]\nRewriteBase \/\nRewriteRule ^index\\.php$ - [L]\nRewriteCond %{REQUEST_FILENAME} !-f\nRewriteCond %{REQUEST_FILENAME} !-d\nRewriteRule . \/index.php [L]\n<\/IfModule>\n# END WordPress"},"result":null}
{"timestamp":"2026-03-30 08:47:27","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_name, option_value FROM mod494_options WHERE option_name IN ('permalink_structure', 'woocommerce_myaccount_page_id', 'woocommerce_shop_page_id', 'woocommerce_cart_page_id', 'woocommerce_checkout_page_id')"},"result":null}
{"timestamp":"2026-03-30 08:47:27","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_name, option_value FROM mod494_options WHERE option_name IN ('permalink_structure', 'woocommerce_myaccount_page_id', 'woocommerce_shop_page_id', 'woocommerce_cart_page_id', 'woocommerce_checkout_page_id')"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-30 08:47:32","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":null}
{"timestamp":"2026-03-30 08:47:32","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::db_query(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-03-30 08:47:38","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"sql":"SELECT option_name, option_value FROM mod494_options WHERE option_name = 'permalink_structure'"},"result":null}
{"timestamp":"2026-03-30 08:47:38","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"sql":"SELECT option_name, option_value FROM mod494_options WHERE option_name = 'permalink_structure'"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-03-30 11:00:36","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-card-manager.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Card_Manager {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_save_card', [ self::class, 'handle_save_card' ] );\n        add_action( 'wp_ajax_kloktion_remove_card', [ self::class, 'handle_remove_card' ] );\n        add_action( 'wp_ajax_kloktion_create_setup_intent', [ self::class, 'create_setup_intent' ] );\n        add_action( 'wp_body_open', [ self::class, 'render_alert_banner' ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: SetupIntent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function create_setup_intent(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            wp_send_json_error( [ 'message' => __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        $customer_id = self::get_or_create_stripe_customer( $user_id );\n        if ( is_wp_error( $customer_id ) ) {\n            wp_send_json_error( [ 'message' => $customer_id->get_error_message() ], 500 );\n        }\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/setup_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'customer' => $customer_id,\n                    'usage'    => 'off_session',\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            wp_send_json_error( [ 'message' => $response->get_error_message() ], 500 );\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            wp_send_json_error( [ 'message' => $body['error']['message'] ?? __( 'Stripe error.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        wp_send_json_success( [\n            'client_secret' => $body['client_secret'] ?? '',\n        ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Save card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_save_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = sanitize_text_field( $_POST['payment_method_id'] ?? '' );\n        if ( empty( $payment_method_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Missing payment method.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            wp_send_json_error( [ 'message' => __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        \/\/ Retrieve payment method details from Stripe.\n        $response = wp_remote_get(\n            'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ),\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            wp_send_json_error( [ 'message' => $response->get_error_message() ], 500 );\n        }\n\n        $pm = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $pm['error'] ) ) {\n            wp_send_json_error( [ 'message' => $pm['error']['message'] ?? __( 'Could not retrieve card details.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        $card = $pm['card'] ?? [];\n\n        update_user_meta( $user_id, '_kloktion_card_payment_method', $payment_method_id );\n        update_user_meta( $user_id, '_kloktion_card_last4', sanitize_text_field( $card['last4'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_brand', sanitize_text_field( $card['brand'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_month', (int) ( $card['exp_month'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_year', (int) ( $card['exp_year'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_saved_at', time() );\n\n        \/\/ Persist consent if provided.\n        $consent = sanitize_text_field( $_POST['consent'] ?? '' );\n        if ( '1' === $consent && ! self::has_consent( $user_id ) ) {\n            self::record_consent( $user_id );\n        }\n\n        wp_send_json_success( [\n            'message' => __( 'Card saved successfully.', 'kloktion-dutch-auction' ),\n            'card'    => self::get_card_info( $user_id ),\n        ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Remove card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_remove_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n\n        if ( ! empty( $payment_method_id ) ) {\n            $secret_key = self::get_stripe_secret_key();\n\n            if ( ! empty( $secret_key ) ) {\n                wp_remote_post(\n                    'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ) . '\/detach',\n                    [\n                        'headers' => [\n                            'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                        ],\n                    ]\n                );\n            }\n        }\n\n        delete_user_meta( $user_id, '_kloktion_card_payment_method' );\n        delete_user_meta( $user_id, '_kloktion_card_last4' );\n        delete_user_meta( $user_id, '_kloktion_card_brand' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_month' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_year' );\n        delete_user_meta( $user_id, '_kloktion_card_saved_at' );\n\n        wp_send_json_success( [ 'message' => __( 'Card removed.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Card validation helpers\n    \/\/ -------------------------------------------------------------------------\n\n    public static function has_valid_card( int $user_id ): bool {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return false;\n        }\n\n        $exp_month = (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true );\n        $exp_year  = (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true );\n\n        $now_month = (int) date( 'n' );\n        $now_year  = (int) date( 'Y' );\n\n        return ( $exp_year > $now_year ) || ( $exp_year === $now_year && $exp_month >= $now_month );\n    }\n\n    public static function get_card_info( int $user_id ): ?array {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return null;\n        }\n\n        return [\n            'last4'     => get_user_meta( $user_id, '_kloktion_card_last4', true ),\n            'brand'     => get_user_meta( $user_id, '_kloktion_card_brand', true ),\n            'exp_month' => (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true ),\n            'exp_year'  => (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true ),\n        ];\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Consent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function record_consent( int $user_id ): void {\n        global $wpdb;\n\n        $wpdb->insert(\n            $wpdb->prefix . 'kloktion_card_consents',\n            [\n                'user_id'      => $user_id,\n                'consent_type' => 'penalty_terms',\n                'ip_address'   => self::get_client_ip(),\n                'accepted_at'  => current_time( 'mysql' ),\n            ],\n            [ '%d', '%s', '%s', '%s' ]\n        );\n\n        update_user_meta( $user_id, '_kloktion_penalty_consent', time() );\n    }\n\n    public static function has_consent( int $user_id ): bool {\n        return (bool) get_user_meta( $user_id, '_kloktion_penalty_consent', true );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Penalty charge\n    \/\/ -------------------------------------------------------------------------\n\n    public static function charge_penalty( int $user_id, int $order_id, float $amount ): bool {\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $payment_method_id ) ) {\n            return false;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return false;\n        }\n\n        $currency = strtolower( get_woocommerce_currency() );\n        $amount_cents = (int) round( $amount * 100 );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/payment_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'amount'               => $amount_cents,\n                    'currency'             => $currency,\n                    'payment_method'       => $payment_method_id,\n                    'customer'             => self::get_or_create_stripe_customer( $user_id ),\n                    'off_session'          => 'true',\n                    'confirm'              => 'true',\n                    'description'          => sprintf(\n                        'Kloktion penalty \u2014 Order #%d',\n                        $order_id\n                    ),\n                    'metadata[order_id]'   => $order_id,\n                    'metadata[user_id]'    => $user_id,\n                    'metadata[type]'       => 'penalty',\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $response->get_error_message(),\n            ] );\n            return false;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $body['error']['message'] ?? 'Unknown Stripe error',\n            ] );\n            return false;\n        }\n\n        if ( ( $body['status'] ?? '' ) === 'succeeded' ) {\n            update_post_meta( $order_id, '_kloktion_penalty_intent_' . time(), $body['id'] ?? '' );\n            return true;\n        }\n\n        return false;\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Alert banner\n    \/\/ -------------------------------------------------------------------------\n\n    public static function render_alert_banner(): void {\n        if ( is_admin() ) {\n            return;\n        }\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        if ( self::has_valid_card( $user_id ) ) {\n            return;\n        }\n\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-alert-banner\">%s <a href=\"%s\">%s<\/a><\/div>',\n            esc_html__( 'Unverified account: Register a card to participate in auctions.', 'kloktion-dutch-auction' ),\n            esc_url( $wallet_url ),\n            esc_html__( 'My Wallet', 'kloktion-dutch-auction' )\n        );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Private helpers\n    \/\/ -------------------------------------------------------------------------\n\n    private static function get_stripe_secret_key(): string {\n        $stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n        $test_mode       = ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes';\n\n        return $test_mode\n            ? ( $stripe_settings['test_secret_key'] ?? '' )\n            : ( $stripe_settings['secret_key'] ?? '' );\n    }\n\n    private static function get_or_create_stripe_customer( int $user_id ): string|\\WP_Error {\n        $customer_id = get_user_meta( $user_id, '_stripe_customer_id', true );\n\n        if ( ! empty( $customer_id ) ) {\n            return $customer_id;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) );\n        }\n\n        $user = get_userdata( $user_id );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/customers',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'email'       => $user->user_email ?? '',\n                    'name'        => trim( ( $user->first_name ?? '' ) . ' ' . ( $user->last_name ?? '' ) ),\n                    'description' => 'Kloktion user ID ' . $user_id,\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            return new \\WP_Error( 'stripe_error', $body['error']['message'] ?? __( 'Stripe customer creation failed.', 'kloktion-dutch-auction' ) );\n        }\n\n        $customer_id = $body['id'] ?? '';\n\n        if ( ! empty( $customer_id ) ) {\n            update_user_meta( $user_id, '_stripe_customer_id', $customer_id );\n        }\n\n        return $customer_id;\n    }\n\n    private static function get_client_ip(): string {\n        if ( class_exists( '\\WC_Geolocation' ) ) {\n            return \\WC_Geolocation::get_ip_address();\n        }\n\n        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';\n    }\n}\n"},"result":null}
{"timestamp":"2026-03-30 11:00:37","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/myaccount\/my-wallet.php","content":"<?php\ndefined( 'ABSPATH' ) || exit;\n\n$stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n$publishable_key = ( ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes' )\n    ? ( $stripe_settings['test_publishable_key'] ?? '' )\n    : ( $stripe_settings['publishable_key'] ?? '' );\n?>\n\n<script src=\"https:\/\/js.stripe.com\/v3\/\"><\/script>\n\n<div class=\"kloktion-wallet\">\n    <h3><?php esc_html_e( 'Payment Card', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <?php if ( $card_info ) : ?>\n        <div class=\"kloktion-wallet__card\">\n            <div class=\"kloktion-wallet__card-icon\">\n                <span class=\"kloktion-wallet__brand\"><?php echo esc_html( ucfirst( $card_info['brand'] ) ); ?><\/span>\n            <\/div>\n            <div class=\"kloktion-wallet__card-details\">\n                <span class=\"kloktion-wallet__last4\">&bull;&bull;&bull;&bull; &bull;&bull;&bull;&bull; &bull;&bull;&bull;&bull; <?php echo esc_html( $card_info['last4'] ); ?><\/span>\n                <span class=\"kloktion-wallet__expiry\">\n                    <?php\n                    printf(\n                        esc_html__( 'Expires %s\/%s', 'kloktion-dutch-auction' ),\n                        esc_html( str_pad( $card_info['exp_month'], 2, '0', STR_PAD_LEFT ) ),\n                        esc_html( $card_info['exp_year'] )\n                    );\n                    ?>\n                <\/span>\n            <\/div>\n            <div class=\"kloktion-wallet__card-actions\">\n                <button type=\"button\" class=\"button kloktion-wallet__change-btn\" id=\"kloktion-change-card\">\n                    <?php esc_html_e( 'Change Card', 'kloktion-dutch-auction' ); ?>\n                <\/button>\n                <button type=\"button\" class=\"button kloktion-wallet__remove-btn\" id=\"kloktion-remove-card\">\n                    <?php esc_html_e( 'Remove Card', 'kloktion-dutch-auction' ); ?>\n                <\/button>\n            <\/div>\n        <\/div>\n    <?php else : ?>\n        <div class=\"kloktion-wallet__no-card\">\n            <p><?php esc_html_e( 'No payment card registered. Add a card to participate in auctions.', 'kloktion-dutch-auction' ); ?><\/p>\n        <\/div>\n    <?php endif; ?>\n\n    <?php if ( ! $has_consent ) : ?>\n        <div class=\"kloktion-wallet__consent\" id=\"kloktion-consent-section\">\n            <label class=\"kloktion-wallet__consent-label\">\n                <input type=\"checkbox\" id=\"kloktion-consent-checkbox\" \/>\n                <?php esc_html_e( 'I accept the Terms and Conditions and agree to a 5% penalty in the event of withdrawal after winning an auction.', 'kloktion-dutch-auction' ); ?>\n            <\/label>\n        <\/div>\n    <?php endif; ?>\n\n    <div class=\"kloktion-wallet__add-form\" id=\"kloktion-card-form\" style=\"<?php echo $card_info ? 'display:none;' : ''; ?>\">\n        <div id=\"kloktion-card-element\"><\/div>\n        <div id=\"kloktion-card-errors\" class=\"kloktion-wallet__errors\"><\/div>\n        <button type=\"button\" class=\"button alt kloktion-wallet__save-btn\" id=\"kloktion-save-card\" <?php echo ( ! $has_consent && ! $card_info ) ? 'disabled' : ''; ?>>\n            <?php esc_html_e( 'Save Card', 'kloktion-dutch-auction' ); ?>\n        <\/button>\n    <\/div>\n\n    <div class=\"kloktion-wallet__badge\">\n        <span class=\"kloktion-secure-badge\">&#x1F512; <?php esc_html_e( 'Secure Payment via Bank Fingerprint', 'kloktion-dutch-auction' ); ?><\/span>\n        <p class=\"kloktion-wallet__note\"><?php esc_html_e( 'Your card details are securely stored by Stripe. We never see or store your full card number.', 'kloktion-dutch-auction' ); ?><\/p>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    if (typeof Stripe === 'undefined') return;\n\n    var publishableKey = <?php echo wp_json_encode( $publishable_key ); ?>;\n    if (!publishableKey) return;\n\n    var stripe = Stripe(publishableKey);\n    var elements = stripe.elements();\n    var cardElement = elements.create('card', {\n        hidePostalCode: true,\n        style: {\n            base: {\n                fontSize: '16px',\n                color: '#32325d',\n                '::placeholder': { color: '#aab7c4' }\n            }\n        }\n    });\n\n    var cardForm = document.getElementById('kloktion-card-form');\n    var cardMount = document.getElementById('kloktion-card-element');\n    if (cardMount) cardElement.mount('#kloktion-card-element');\n\n    var errorsEl = document.getElementById('kloktion-card-errors');\n    cardElement.on('change', function(event) {\n        errorsEl.textContent = event.error ? event.error.message : '';\n    });\n\n    \/\/ Consent checkbox enables save button\n    var consentBox = document.getElementById('kloktion-consent-checkbox');\n    var saveBtn = document.getElementById('kloktion-save-card');\n    if (consentBox) {\n        consentBox.addEventListener('change', function() {\n            saveBtn.disabled = !this.checked;\n        });\n    }\n\n    \/\/ Change card button\n    var changeBtn = document.getElementById('kloktion-change-card');\n    if (changeBtn) {\n        changeBtn.addEventListener('click', function() {\n            cardForm.style.display = '';\n        });\n    }\n\n    \/\/ Save card\n    if (saveBtn) {\n        saveBtn.addEventListener('click', function() {\n            saveBtn.disabled = true;\n            saveBtn.textContent = <?php echo wp_json_encode( __( 'Saving...', 'kloktion-dutch-auction' ) ); ?>;\n\n            \/\/ First create SetupIntent\n            var fd = new FormData();\n            fd.append('action', 'kloktion_create_setup_intent');\n            fd.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n\n            fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                method: 'POST', body: fd, credentials: 'same-origin'\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (!r.success) throw new Error(r.data.message || 'Failed to create setup');\n                return stripe.confirmCardSetup(r.data.client_secret, {\n                    payment_method: { card: cardElement }\n                });\n            })\n            .then(function(result) {\n                if (result.error) throw new Error(result.error.message);\n\n                \/\/ Save the payment method\n                var fd2 = new FormData();\n                fd2.append('action', 'kloktion_save_card');\n                fd2.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n                fd2.append('payment_method_id', result.setupIntent.payment_method);\n                fd2.append('consent', consentBox && consentBox.checked ? '1' : '0');\n\n                return fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                    method: 'POST', body: fd2, credentials: 'same-origin'\n                });\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) {\n                    location.reload();\n                } else {\n                    throw new Error(r.data.message || 'Failed to save card');\n                }\n            })\n            .catch(function(err) {\n                errorsEl.textContent = err.message;\n                saveBtn.disabled = false;\n                saveBtn.textContent = <?php echo wp_json_encode( __( 'Save Card', 'kloktion-dutch-auction' ) ); ?>;\n            });\n        });\n    }\n\n    \/\/ Remove card\n    var removeBtn = document.getElementById('kloktion-remove-card');\n    if (removeBtn) {\n        removeBtn.addEventListener('click', function() {\n            if (!confirm(<?php echo wp_json_encode( __( 'Are you sure you want to remove your card?', 'kloktion-dutch-auction' ) ); ?>)) return;\n\n            var fd = new FormData();\n            fd.append('action', 'kloktion_remove_card');\n            fd.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n\n            fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                method: 'POST', body: fd, credentials: 'same-origin'\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) location.reload();\n            });\n        });\n    }\n})();\n<\/script>\n"},"result":null}
{"timestamp":"2026-03-30 11:00:40","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-plugin.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Plugin {\n\n    private static $instance = null;\n\n    public static function instance() {\n        if ( null === self::$instance ) {\n            self::$instance = new self();\n        }\n        return self::$instance;\n    }\n\n    private function __construct() {\n        $this->init_hooks();\n    }\n\n    private function init_hooks() {\n        Installer::maybe_upgrade();\n\n        add_filter( 'cron_schedules', [ $this, 'add_cron_schedules' ] );\n        add_action( 'init', [ $this, 'register_product_type' ] );\n        add_action( 'kloktion_check_auctions', [ Cron::class, 'check_auctions' ] );\n        add_action( 'kloktion_check_penalties', [ Cron::class, 'check_unpaid_wins' ] );\n\n        \/\/ Schedule daily penalty check if not already scheduled\n        if ( ! wp_next_scheduled( 'kloktion_check_penalties' ) ) {\n            wp_schedule_event( time(), 'daily', 'kloktion_check_penalties' );\n        }\n\n        if ( is_admin() ) {\n            add_action( 'admin_menu', [ Admin::class, 'register_menu' ] );\n            add_action( 'admin_enqueue_scripts', [ $this, 'admin_assets' ] );\n            Admin::init_product_hooks();\n        }\n\n        \/\/ Payment\/order hooks must load everywhere (including admin)\n        \/\/ so manual order-status changes also trigger auction finalization.\n        Checkout_Handler::init();\n\n        if ( ! is_admin() || wp_doing_ajax() ) {\n            add_action( 'wp_enqueue_scripts', [ $this, 'frontend_assets' ] );\n            Cart_Handler::init();\n        }\n\n        add_action( 'rest_api_init', [ Rest_Api::class, 'register_routes' ] );\n\n        Dokan::init();\n        Watchlist::init();\n        My_Account::init();\n        Emails::init();\n        One_Click::init();\n        Card_Manager::init();\n\n        add_filter( 'woocommerce_product_class', [ $this, 'product_class' ], 10, 2 );\n        add_filter( 'product_type_selector', [ $this, 'add_product_type' ] );\n        add_filter( 'woocommerce_get_price_html', [ $this, 'auction_price_html' ], 10, 2 );\n        add_filter( 'woocommerce_product_single_add_to_cart_text', [ $this, 'add_to_cart_text' ], 10, 2 );\n        add_filter( 'woocommerce_product_add_to_cart_text', [ $this, 'add_to_cart_text' ], 10, 2 );\n        add_action( 'woocommerce_single_product_summary', [ $this, 'auction_info_display' ], 25 );\n        add_action( 'woocommerce_after_shop_loop_item_title', [ $this, 'archive_auction_badge' ], 6 );\n        add_action( 'woocommerce_dutch_auction_add_to_cart', [ $this, 'add_to_cart_template' ] );\n        add_shortcode( 'kloktion_auction', [ $this, 'shortcode_auction' ] );\n        add_shortcode( 'kloktion_auctions', [ $this, 'shortcode_auctions_list' ] );\n        add_action( 'init', [ $this, 'load_textdomain' ] );\n\n        \/\/ Hide ended auctions from shop\/category\/search pages.\n        add_action( 'kloktion_status_changed', [ $this, 'sync_catalog_visibility' ], 10, 3 );\n        add_filter( 'woocommerce_related_products', [ $this, 'filter_related_products' ], 10, 3 );\n        add_action( 'woocommerce_product_query', [ $this, 'exclude_ended_auctions_from_shop' ] );\n    }\n\n    public function add_cron_schedules( $schedules ) {\n        $schedules['every_minute'] = [\n            'interval' => 60,\n            'display'  => __( 'Every Minute', 'kloktion-dutch-auction' ),\n        ];\n        return $schedules;\n    }\n\n    public function register_product_type() {\n    }\n\n    public function product_class( $classname, $product_type ) {\n        if ( 'dutch_auction' === $product_type ) {\n            return Product_Type::class;\n        }\n        return $classname;\n    }\n\n    public function add_product_type( $types ) {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    public function auction_price_html( $price_html, $product ) {\n        if ( ! $product instanceof Product_Type ) {\n            return $price_html;\n        }\n\n        $status = $product->get_auction_status();\n\n        if ( 'sold' === $status ) {\n            $sold_price = (float) get_post_meta( $product->get_id(), '_kloktion_sold_price', true );\n            return '<span class=\"kloktion-price-sold\">' . sprintf(\n                __( 'SOLD at %s', 'kloktion-dutch-auction' ),\n                wc_price( $sold_price )\n            ) . '<\/span>';\n        }\n\n        if ( in_array( $status, [ 'expired', 'stopped' ], true ) ) {\n            return '<span class=\"kloktion-price-ended\">' . __( 'Auction Ended', 'kloktion-dutch-auction' ) . '<\/span>';\n        }\n\n        if ( 'scheduled' === $status ) {\n            $start_price = (float) get_post_meta( $product->get_id(), '_kloktion_start_price', true );\n            return '<span class=\"kloktion-price-scheduled\">' . sprintf(\n                __( 'Starting at %s', 'kloktion-dutch-auction' ),\n                wc_price( $start_price )\n            ) . '<\/span>';\n        }\n\n        \/\/ Active or paused \u2014 clean price, no crossed-out original.\n        $current = $product->get_price();\n        return wc_price( $current );\n    }\n\n    public function add_to_cart_text( $text, $product ) {\n        if ( ! $product instanceof Product_Type ) {\n            return $text;\n        }\n\n        $status = $product->get_auction_status();\n\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return __( 'View Auction', 'kloktion-dutch-auction' );\n        }\n\n        return sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) );\n    }\n\n    public function auction_info_display() {\n        global $product;\n\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $template = KLOKTION_PLUGIN_DIR . 'templates\/single-product\/auction-info.php';\n        if ( file_exists( $template ) ) {\n            include $template;\n        }\n    }\n\n    \/\/ Usage: [kloktion_auction] or [kloktion_auction id=\"123\"]\n    public function shortcode_auction( $atts ): string {\n        $atts = shortcode_atts( [ 'id' => '' ], $atts, 'kloktion_auction' );\n\n        $product_id = ! empty( $atts['id'] ) ? absint( $atts['id'] ) : get_the_ID();\n        $product    = wc_get_product( $product_id );\n\n        if ( ! $product instanceof Product_Type ) {\n            return '';\n        }\n\n        if ( ! wp_script_is( 'kloktion-frontend', 'enqueued' ) ) {\n            $this->enqueue_shortcode_assets( $product_id );\n        }\n\n        ob_start();\n        $template = KLOKTION_PLUGIN_DIR . 'templates\/single-product\/auction-info.php';\n        if ( file_exists( $template ) ) {\n            include $template;\n        }\n        return ob_get_clean();\n    }\n\n    private function enqueue_shortcode_assets( int $product_id ): void {\n        wp_enqueue_style(\n            'kloktion-frontend',\n            KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-frontend.css',\n            [],\n            KLOKTION_VERSION\n        );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        $status   = Auction_Engine::get_status( $product_id );\n\n        wp_enqueue_script(\n            'kloktion-frontend',\n            KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-frontend.js',\n            [],\n            KLOKTION_VERSION,\n            true\n        );\n\n        wp_localize_script( 'kloktion-frontend', 'kloctionData', [\n            'apiBase'      => rest_url( 'kloktion\/v1' ),\n            'nonce'        => wp_create_nonce( 'wp_rest' ),\n            'ajaxUrl'      => admin_url( 'admin-ajax.php' ),\n            'productId'    => $product_id,\n            'pollInterval' => (int) ( $settings['poll_interval'] ?? 2 ),\n            'status'       => $status,\n            'currentPrice' => Auction_Engine::calculate_price( $product_id ),\n            'startPrice'   => (float) get_post_meta( $product_id, '_kloktion_start_price', true ),\n            'reservePrice' => (float) get_post_meta( $product_id, '_kloktion_reserve_price', true ),\n            'timeRemaining'=> Auction_Engine::get_time_remaining( $product_id ),\n            'progress'     => Auction_Engine::get_progress( $product_id ),\n            'currency'     => get_woocommerce_currency_symbol(),\n        ] );\n    }\n\n    public function archive_auction_badge() {\n        global $product;\n\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        $badges = [\n            'active'    => [ 'label' => __( 'LIVE', 'kloktion-dutch-auction' ), 'class' => 'active' ],\n            'paused'    => [ 'label' => __( 'LAST CHANCE', 'kloktion-dutch-auction' ), 'class' => 'paused' ],\n            'scheduled' => [ 'label' => __( 'COMING SOON', 'kloktion-dutch-auction' ), 'class' => 'scheduled' ],\n            'sold'      => [ 'label' => __( 'SOLD', 'kloktion-dutch-auction' ), 'class' => 'sold' ],\n            'expired'   => [ 'label' => __( 'ENDED', 'kloktion-dutch-auction' ), 'class' => 'ended' ],\n            'stopped'   => [ 'label' => __( 'STOPPED', 'kloktion-dutch-auction' ), 'class' => 'stopped' ],\n        ];\n\n        $badge = $badges[ $status ] ?? $badges['expired'];\n        printf(\n            '<span class=\"kloktion-badge kloktion-badge--%s\">%s<\/span>',\n            esc_attr( $badge['class'] ),\n            esc_html( $badge['label'] )\n        );\n    }\n\n    \/**\n     * [kloktion_auctions] \u2014 list auctions filtered by status.\n     *\n     * Attributes: status (active|paused|scheduled|sold|expired|stopped), limit, columns, orderby\n     * Usage: [kloktion_auctions status=\"active\" limit=\"12\" columns=\"3\"]\n     *\/\n    public function shortcode_auctions_list( $atts ): string {\n        $atts = shortcode_atts( [\n            'status'  => 'active',\n            'limit'   => 12,\n            'columns' => 3,\n            'orderby' => 'date',\n            'order'   => 'DESC',\n        ], $atts, 'kloktion_auctions' );\n\n        $valid = [ 'active', 'paused', 'scheduled', 'sold', 'expired', 'stopped' ];\n        $status = in_array( $atts['status'], $valid, true ) ? $atts['status'] : 'active';\n\n        global $wpdb;\n        $order = 'ASC' === strtoupper( $atts['order'] ) ? 'ASC' : 'DESC';\n        $product_ids = $wpdb->get_col(\n            $wpdb->prepare(\n                \"SELECT pm.post_id\n                 FROM {$wpdb->postmeta} pm\n                 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                 WHERE pm.meta_key = '_kloktion_status'\n                   AND pm.meta_value = %s\n                   AND p.post_status = 'publish'\n                 ORDER BY p.post_date {$order}\n                 LIMIT %d\",\n                $status,\n                absint( $atts['limit'] )\n            )\n        );\n\n        if ( empty( $product_ids ) ) {\n            return '<p class=\"kloktion-no-auctions\">' . esc_html__( 'No auctions found.', 'kloktion-dutch-auction' ) . '<\/p>';\n        }\n\n        return do_shortcode( '[products ids=\"' . implode( ',', array_map( 'absint', $product_ids ) ) . '\" columns=\"' . absint( $atts['columns'] ) . '\"]' );\n    }\n\n    public function add_to_cart_template() {\n        global $product;\n        if ( $product instanceof Product_Type && $product->is_purchasable() && $product->is_in_stock() ) {\n            wc_get_template( 'single-product\/add-to-cart\/simple.php' );\n        }\n    }\n\n    public function admin_assets( $hook ) {\n        $screen = get_current_screen();\n        if ( ! $screen ) {\n            return;\n        }\n\n        if ( in_array( $screen->id, [ 'product', 'edit-product' ], true )\n             || strpos( $screen->id, 'kloktion' ) !== false ) {\n            wp_enqueue_style(\n                'kloktion-admin',\n                KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-admin.css',\n                [],\n                KLOKTION_VERSION\n            );\n            wp_enqueue_script(\n                'kloktion-admin',\n                KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-admin.js',\n                [ 'jquery', 'wc-admin-product-meta-boxes' ],\n                KLOKTION_VERSION,\n                true\n            );\n            wp_localize_script( 'kloktion-admin', 'kloctionAdmin', [\n                'nonce'  => wp_create_nonce( 'kloktion_admin' ),\n                'ajaxurl'=> admin_url( 'admin-ajax.php' ),\n            ] );\n        }\n    }\n\n    public function frontend_assets() {\n        if ( ! is_product() && ! is_shop() && ! is_product_category() && ! is_product_tag() && ! is_account_page() && ! is_front_page() ) {\n            return;\n        }\n\n        wp_enqueue_style(\n            'kloktion-frontend',\n            KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-frontend.css',\n            [],\n            KLOKTION_VERSION\n        );\n\n        if ( is_shop() || is_product_category() || is_product_tag() ) {\n            wp_enqueue_script( 'kloktion-archive-hearts', false, [], KLOKTION_VERSION, true );\n            wp_add_inline_script( 'kloktion-archive-hearts', '\n(function(){\n    var ajaxUrl = ' . wp_json_encode( admin_url( 'admin-ajax.php' ) ) . ';\n    document.addEventListener(\"click\", function(e) {\n        var btn = e.target.closest(\".kloktion-heart--archive\");\n        if (!btn) return;\n        e.preventDefault();\n        e.stopPropagation();\n        var login = btn.getAttribute(\"data-login\");\n        if (login) { window.location.href = login; return; }\n        var pid = btn.getAttribute(\"data-product-id\");\n        var nonce = btn.getAttribute(\"data-nonce\");\n        var fd = new FormData();\n        fd.append(\"action\", \"kloktion_toggle_watch\");\n        fd.append(\"product_id\", pid);\n        fd.append(\"nonce\", nonce);\n        fetch(ajaxUrl, { method: \"POST\", body: fd, credentials: \"same-origin\" })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) {\n                    btn.classList.toggle(\"kloktion-heart--active\", r.data.watching);\n                    btn.classList.add(\"kloktion-heart--animating\");\n                    setTimeout(function() { btn.classList.remove(\"kloktion-heart--animating\"); }, 400);\n                }\n            });\n    });\n})();' );\n        }\n\n        if ( is_product() ) {\n            $product_id = get_the_ID();\n            $terms      = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n            if ( ! is_wp_error( $terms ) && in_array( 'dutch_auction', $terms, true ) ) {\n                $settings = get_option( 'kloktion_settings', [] );\n                $status   = Auction_Engine::get_status( $product_id );\n\n                wp_enqueue_script(\n                    'kloktion-frontend',\n                    KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-frontend.js',\n                    [],\n                    KLOKTION_VERSION,\n                    true\n                );\n\n                wp_localize_script( 'kloktion-frontend', 'kloctionData', [\n                    'apiBase'      => rest_url( 'kloktion\/v1' ),\n                    'nonce'        => wp_create_nonce( 'wp_rest' ),\n                    'ajaxUrl'      => admin_url( 'admin-ajax.php' ),\n                    'productId'    => $product_id,\n                    'pollInterval' => (int) ( $settings['poll_interval'] ?? 2 ),\n                    'status'       => $status,\n                    'currentPrice' => Auction_Engine::calculate_price( $product_id ),\n                    'startPrice'   => (float) get_post_meta( $product_id, '_kloktion_start_price', true ),\n                    'reservePrice' => (float) get_post_meta( $product_id, '_kloktion_reserve_price', true ),\n                    'timeRemaining'=> Auction_Engine::get_time_remaining( $product_id ),\n                    'progress'     => Auction_Engine::get_progress( $product_id ),\n                    'currency'     => get_woocommerce_currency_symbol(),\n                ] );\n\n                \/\/ reCAPTCHA v3 for anti-bot protection on Buy Now\n                $recaptcha_key = get_option( 'kloktion_recaptcha_site_key', '' );\n                if ( $recaptcha_key ) {\n                    wp_enqueue_script( 'google-recaptcha', 'https:\/\/www.google.com\/recaptcha\/api.js?render=' . urlencode( $recaptcha_key ), [], null, true );\n                }\n\n                \/\/ Add card status to localized data for padlock\/popup\n                if ( is_user_logged_in() ) {\n                    wp_localize_script( 'kloktion-frontend', 'kloctionCard', [\n                        'hasCard'     => Card_Manager::has_valid_card( get_current_user_id() ),\n                        'hasConsent'  => Card_Manager::has_consent( get_current_user_id() ),\n                        'walletUrl'   => wc_get_account_endpoint_url( 'my-wallet' ),\n                        'recaptchaKey'=> $recaptcha_key,\n                    ] );\n                }\n            }\n        }\n    }\n\n    public function load_textdomain() {\n        load_plugin_textdomain( 'kloktion-dutch-auction', false, dirname( KLOKTION_PLUGIN_BASENAME ) . '\/languages' );\n    }\n\n    \/**\n     * Keep WC catalog visibility in sync with auction status.\n     * Ended auctions are hidden from shop\/category\/search.\n     *\/\n    public function sync_catalog_visibility( int $product_id, string $new_status, string $old_status ): void {\n        $product = wc_get_product( $product_id );\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $hidden_statuses = [ 'sold', 'expired', 'stopped' ];\n\n        if ( in_array( $new_status, $hidden_statuses, true ) ) {\n            $product->set_catalog_visibility( 'hidden' );\n            $product->save();\n        } elseif ( in_array( $old_status, $hidden_statuses, true ) ) {\n            $product->set_catalog_visibility( 'visible' );\n            $product->save();\n        }\n    }\n\n    \/**\n     * Exclude ended\/sold\/stopped auctions from shop, category and search queries.\n     * Safety net: even if catalog_visibility is out of sync, these won't appear.\n     *\/\n    public function exclude_ended_auctions_from_shop( $q ): void {\n        if ( is_admin() ) {\n            return;\n        }\n\n        $hidden_statuses = [ 'sold', 'expired', 'stopped' ];\n\n        $meta_query = $q->get( 'meta_query' );\n        if ( ! is_array( $meta_query ) ) {\n            $meta_query = [];\n        }\n\n        $meta_query[] = [\n            'relation' => 'OR',\n            [\n                'key'     => '_kloktion_status',\n                'compare' => 'NOT EXISTS',\n            ],\n            [\n                'key'     => '_kloktion_status',\n                'value'   => $hidden_statuses,\n                'compare' => 'NOT IN',\n            ],\n        ];\n\n        $q->set( 'meta_query', $meta_query );\n    }\n\n    \/**\n     * Only show active auctions in Related Products.\n     *\/\n    public function filter_related_products( array $related_ids, int $product_id, array $args ): array {\n        if ( empty( $related_ids ) ) {\n            return $related_ids;\n        }\n\n        return array_values( array_filter( $related_ids, function ( $id ) {\n            $status = get_post_meta( $id, '_kloktion_status', true );\n            if ( ! $status ) {\n                return true; \/\/ Not an auction product.\n            }\n            return in_array( $status, [ 'active', 'paused', 'processing' ], true );\n        } ) );\n    }\n}\n"},"result":null}
{"timestamp":"2026-03-30 11:00:41","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__btn {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 15px;\n    font-weight: 600;\n    background: #1a1a1a;\n    color: #fff;\n    border: none;\n    border-radius: 4px;\n    cursor: pointer;\n    white-space: nowrap;\n    transition: background 0.2s ease;\n}\n\n.kloktion-one-click__btn:hover {\n    background: #333;\n}\n\n.kloktion-one-click__btn:disabled {\n    background: #999;\n    cursor: wait;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === PADLOCK PROTECTION === *\/\n.kloktion-padlock {\n    display: flex;\n    align-items: center;\n    gap: 8px;\n    margin-bottom: 10px;\n}\n.kloktion-padlock__toggle {\n    background: #f0f0f0;\n    border: 2px solid #ddd;\n    border-radius: 20px;\n    padding: 6px 14px;\n    cursor: pointer;\n    font-size: 18px;\n    transition: all 0.3s ease;\n    display: flex;\n    align-items: center;\n}\n.kloktion-padlock__toggle:hover {\n    border-color: #4CAF50;\n    background: #e8f5e9;\n}\n.kloktion-padlock__label {\n    font-size: 13px;\n    color: #888;\n    font-style: italic;\n}\n.kloktion-one-click__btn:disabled {\n    opacity: 0.5;\n    cursor: not-allowed;\n}\n.kloktion-one-click__btn--unlocked {\n    animation: kloktion-pulse-buy 1.5s ease-in-out infinite;\n}\n@keyframes kloktion-pulse-buy {\n    0%, 100% { box-shadow: 0 0 0 0 rgba(76, 175, 80, 0.4); }\n    50% { box-shadow: 0 0 0 8px rgba(76, 175, 80, 0); }\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd;\n    border-bottom: 1px solid #ffc107;\n    padding: 8px 15px;\n    text-align: center;\n    font-size: 13px;\n    color: #856404;\n    position: relative;\n    z-index: 9999;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n"},"result":null}
{"timestamp":"2026-03-30 11:00:48","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-03-30 11:03:35","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-03-30 14:38:03","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-card-manager.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Card_Manager {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_save_card', [ self::class, 'handle_save_card' ] );\n        add_action( 'wp_ajax_kloktion_remove_card', [ self::class, 'handle_remove_card' ] );\n        add_action( 'wp_ajax_kloktion_create_setup_intent', [ self::class, 'create_setup_intent' ] );\n        add_action( 'wp_body_open', [ self::class, 'render_alert_banner' ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: SetupIntent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function create_setup_intent(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            wp_send_json_error( [ 'message' => __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        $customer_id = self::get_or_create_stripe_customer( $user_id );\n        if ( is_wp_error( $customer_id ) ) {\n            wp_send_json_error( [ 'message' => $customer_id->get_error_message() ], 500 );\n        }\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/setup_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'customer' => $customer_id,\n                    'usage'    => 'off_session',\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            wp_send_json_error( [ 'message' => $response->get_error_message() ], 500 );\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            wp_send_json_error( [ 'message' => $body['error']['message'] ?? __( 'Stripe error.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        wp_send_json_success( [\n            'client_secret' => $body['client_secret'] ?? '',\n        ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Save card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_save_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = sanitize_text_field( $_POST['payment_method_id'] ?? '' );\n        if ( empty( $payment_method_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Missing payment method.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            wp_send_json_error( [ 'message' => __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        \/\/ Retrieve payment method details from Stripe.\n        $response = wp_remote_get(\n            'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ),\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            wp_send_json_error( [ 'message' => $response->get_error_message() ], 500 );\n        }\n\n        $pm = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $pm['error'] ) ) {\n            wp_send_json_error( [ 'message' => $pm['error']['message'] ?? __( 'Could not retrieve card details.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        $card = $pm['card'] ?? [];\n\n        update_user_meta( $user_id, '_kloktion_card_payment_method', $payment_method_id );\n        update_user_meta( $user_id, '_kloktion_card_last4', sanitize_text_field( $card['last4'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_brand', sanitize_text_field( $card['brand'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_month', (int) ( $card['exp_month'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_year', (int) ( $card['exp_year'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_saved_at', time() );\n\n        \/\/ Persist consent if provided.\n        $consent = sanitize_text_field( $_POST['consent'] ?? '' );\n        if ( '1' === $consent && ! self::has_consent( $user_id ) ) {\n            self::record_consent( $user_id );\n        }\n\n        wp_send_json_success( [\n            'message' => __( 'Card saved successfully.', 'kloktion-dutch-auction' ),\n            'card'    => self::get_card_info( $user_id ),\n        ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Remove card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_remove_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n\n        if ( ! empty( $payment_method_id ) ) {\n            $secret_key = self::get_stripe_secret_key();\n\n            if ( ! empty( $secret_key ) ) {\n                wp_remote_post(\n                    'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ) . '\/detach',\n                    [\n                        'headers' => [\n                            'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                        ],\n                    ]\n                );\n            }\n        }\n\n        delete_user_meta( $user_id, '_kloktion_card_payment_method' );\n        delete_user_meta( $user_id, '_kloktion_card_last4' );\n        delete_user_meta( $user_id, '_kloktion_card_brand' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_month' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_year' );\n        delete_user_meta( $user_id, '_kloktion_card_saved_at' );\n        delete_user_meta( $user_id, '_kloktion_penalty_consent' );\n\n        wp_send_json_success( [ 'message' => __( 'Card removed.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Card validation helpers\n    \/\/ -------------------------------------------------------------------------\n\n    public static function has_valid_card( int $user_id ): bool {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return false;\n        }\n\n        $exp_month = (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true );\n        $exp_year  = (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true );\n\n        $now_month = (int) date( 'n' );\n        $now_year  = (int) date( 'Y' );\n\n        return ( $exp_year > $now_year ) || ( $exp_year === $now_year && $exp_month >= $now_month );\n    }\n\n    public static function get_card_info( int $user_id ): ?array {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return null;\n        }\n\n        return [\n            'last4'     => get_user_meta( $user_id, '_kloktion_card_last4', true ),\n            'brand'     => get_user_meta( $user_id, '_kloktion_card_brand', true ),\n            'exp_month' => (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true ),\n            'exp_year'  => (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true ),\n        ];\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Consent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function record_consent( int $user_id ): void {\n        global $wpdb;\n\n        $wpdb->insert(\n            $wpdb->prefix . 'kloktion_card_consents',\n            [\n                'user_id'      => $user_id,\n                'consent_type' => 'penalty_terms',\n                'ip_address'   => self::get_client_ip(),\n                'accepted_at'  => current_time( 'mysql' ),\n            ],\n            [ '%d', '%s', '%s', '%s' ]\n        );\n\n        update_user_meta( $user_id, '_kloktion_penalty_consent', time() );\n    }\n\n    public static function has_consent( int $user_id ): bool {\n        return (bool) get_user_meta( $user_id, '_kloktion_penalty_consent', true );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Penalty charge\n    \/\/ -------------------------------------------------------------------------\n\n    public static function charge_penalty( int $user_id, int $order_id, float $amount ): bool {\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $payment_method_id ) ) {\n            return false;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return false;\n        }\n\n        $currency = strtolower( get_woocommerce_currency() );\n        $amount_cents = (int) round( $amount * 100 );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/payment_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'amount'               => $amount_cents,\n                    'currency'             => $currency,\n                    'payment_method'       => $payment_method_id,\n                    'customer'             => self::get_or_create_stripe_customer( $user_id ),\n                    'off_session'          => 'true',\n                    'confirm'              => 'true',\n                    'description'          => sprintf(\n                        'Kloktion penalty \u2014 Order #%d',\n                        $order_id\n                    ),\n                    'metadata[order_id]'   => $order_id,\n                    'metadata[user_id]'    => $user_id,\n                    'metadata[type]'       => 'penalty',\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $response->get_error_message(),\n            ] );\n            return false;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $body['error']['message'] ?? 'Unknown Stripe error',\n            ] );\n            return false;\n        }\n\n        if ( ( $body['status'] ?? '' ) === 'succeeded' ) {\n            update_post_meta( $order_id, '_kloktion_penalty_intent_' . time(), $body['id'] ?? '' );\n            return true;\n        }\n\n        return false;\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Alert banner\n    \/\/ -------------------------------------------------------------------------\n\n    public static function render_alert_banner(): void {\n        if ( is_admin() ) {\n            return;\n        }\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        if ( self::has_valid_card( $user_id ) ) {\n            return;\n        }\n\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-alert-banner\">%s <a href=\"%s\">%s<\/a><\/div>',\n            esc_html__( 'Unverified account: Register a card to participate in auctions.', 'kloktion-dutch-auction' ),\n            esc_url( $wallet_url ),\n            esc_html__( 'My Wallet', 'kloktion-dutch-auction' )\n        );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Private helpers\n    \/\/ -------------------------------------------------------------------------\n\n    private static function get_stripe_secret_key(): string {\n        $stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n        $test_mode       = ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes';\n\n        return $test_mode\n            ? ( $stripe_settings['test_secret_key'] ?? '' )\n            : ( $stripe_settings['secret_key'] ?? '' );\n    }\n\n    private static function get_or_create_stripe_customer( int $user_id ): string|\\WP_Error {\n        $customer_id = get_user_meta( $user_id, '_stripe_customer_id', true );\n\n        if ( ! empty( $customer_id ) ) {\n            return $customer_id;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) );\n        }\n\n        $user = get_userdata( $user_id );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/customers',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'email'       => $user->user_email ?? '',\n                    'name'        => trim( ( $user->first_name ?? '' ) . ' ' . ( $user->last_name ?? '' ) ),\n                    'description' => 'Kloktion user ID ' . $user_id,\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            return new \\WP_Error( 'stripe_error', $body['error']['message'] ?? __( 'Stripe customer creation failed.', 'kloktion-dutch-auction' ) );\n        }\n\n        $customer_id = $body['id'] ?? '';\n\n        if ( ! empty( $customer_id ) ) {\n            update_user_meta( $user_id, '_stripe_customer_id', $customer_id );\n        }\n\n        return $customer_id;\n    }\n\n    private static function get_client_ip(): string {\n        if ( class_exists( '\\WC_Geolocation' ) ) {\n            return \\WC_Geolocation::get_ip_address();\n        }\n\n        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';\n    }\n}\n"},"result":null}
{"timestamp":"2026-03-30 14:38:04","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/myaccount\/my-wallet.php","content":"<?php\ndefined( 'ABSPATH' ) || exit;\n\n$stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n$publishable_key = ( ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes' )\n    ? ( $stripe_settings['test_publishable_key'] ?? '' )\n    : ( $stripe_settings['publishable_key'] ?? '' );\n?>\n\n<script src=\"https:\/\/js.stripe.com\/v3\/\"><\/script>\n\n<div class=\"kloktion-wallet\">\n    <h3><?php esc_html_e( 'Payment Card', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <?php if ( $card_info ) : ?>\n        <div class=\"kloktion-wallet__card\">\n            <div class=\"kloktion-wallet__card-icon\">\n                <span class=\"kloktion-wallet__brand\"><?php echo esc_html( ucfirst( $card_info['brand'] ) ); ?><\/span>\n            <\/div>\n            <div class=\"kloktion-wallet__card-details\">\n                <span class=\"kloktion-wallet__last4\">&bull;&bull;&bull;&bull; &bull;&bull;&bull;&bull; &bull;&bull;&bull;&bull; <?php echo esc_html( $card_info['last4'] ); ?><\/span>\n                <span class=\"kloktion-wallet__expiry\">\n                    <?php\n                    printf(\n                        esc_html__( 'Expires %s\/%s', 'kloktion-dutch-auction' ),\n                        esc_html( str_pad( $card_info['exp_month'], 2, '0', STR_PAD_LEFT ) ),\n                        esc_html( $card_info['exp_year'] )\n                    );\n                    ?>\n                <\/span>\n            <\/div>\n            <div class=\"kloktion-wallet__card-actions\">\n                <button type=\"button\" class=\"button kloktion-wallet__change-btn\" id=\"kloktion-change-card\">\n                    <?php esc_html_e( 'Change Card', 'kloktion-dutch-auction' ); ?>\n                <\/button>\n                <button type=\"button\" class=\"button kloktion-wallet__remove-btn\" id=\"kloktion-remove-card\">\n                    <?php esc_html_e( 'Remove Card', 'kloktion-dutch-auction' ); ?>\n                <\/button>\n            <\/div>\n        <\/div>\n    <?php else : ?>\n        <div class=\"kloktion-wallet__no-card\">\n            <p><?php esc_html_e( 'No payment card registered. Add a card to participate in auctions.', 'kloktion-dutch-auction' ); ?><\/p>\n        <\/div>\n    <?php endif; ?>\n\n    <div class=\"kloktion-wallet__consent\" id=\"kloktion-consent-section\">\n        <label class=\"kloktion-wallet__consent-label\">\n            <input type=\"checkbox\" id=\"kloktion-consent-checkbox\" <?php echo $has_consent ? 'checked disabled' : ''; ?> \/>\n            <?php esc_html_e( 'I accept the Terms and Conditions and agree to a 5% penalty in the event of withdrawal after winning an auction.', 'kloktion-dutch-auction' ); ?>\n        <\/label>\n    <\/div>\n\n    <div class=\"kloktion-wallet__add-form\" id=\"kloktion-card-form\" style=\"<?php echo $card_info ? 'display:none;' : ''; ?>\">\n        <div id=\"kloktion-card-element\"><\/div>\n        <div id=\"kloktion-card-errors\" class=\"kloktion-wallet__errors\"><\/div>\n        <button type=\"button\" class=\"button alt kloktion-wallet__save-btn\" id=\"kloktion-save-card\" <?php echo ( ! $has_consent ) ? 'disabled' : ''; ?>>\n            <?php esc_html_e( 'Save Card', 'kloktion-dutch-auction' ); ?>\n        <\/button>\n    <\/div>\n\n    <div class=\"kloktion-wallet__badge\">\n        <span class=\"kloktion-secure-badge\">&#x1F512; <?php esc_html_e( 'Secure Payment via Bank Fingerprint', 'kloktion-dutch-auction' ); ?><\/span>\n        <p class=\"kloktion-wallet__note\"><?php esc_html_e( 'Your card details are securely stored by Stripe. We never see or store your full card number.', 'kloktion-dutch-auction' ); ?><\/p>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    if (typeof Stripe === 'undefined') return;\n\n    var publishableKey = <?php echo wp_json_encode( $publishable_key ); ?>;\n    if (!publishableKey) return;\n\n    var stripe = Stripe(publishableKey);\n    var elements = stripe.elements();\n    var cardElement = elements.create('card', {\n        hidePostalCode: true,\n        style: {\n            base: {\n                fontSize: '16px',\n                color: '#32325d',\n                '::placeholder': { color: '#aab7c4' }\n            }\n        }\n    });\n\n    var cardForm = document.getElementById('kloktion-card-form');\n    var cardMount = document.getElementById('kloktion-card-element');\n    if (cardMount) cardElement.mount('#kloktion-card-element');\n\n    var errorsEl = document.getElementById('kloktion-card-errors');\n    cardElement.on('change', function(event) {\n        errorsEl.textContent = event.error ? event.error.message : '';\n    });\n\n    \/\/ Consent checkbox enables save button\n    var consentBox = document.getElementById('kloktion-consent-checkbox');\n    var saveBtn = document.getElementById('kloktion-save-card');\n    if (consentBox) {\n        consentBox.addEventListener('change', function() {\n            saveBtn.disabled = !this.checked;\n        });\n    }\n\n    \/\/ Change card button\n    var changeBtn = document.getElementById('kloktion-change-card');\n    if (changeBtn) {\n        changeBtn.addEventListener('click', function() {\n            cardForm.style.display = '';\n        });\n    }\n\n    \/\/ Save card\n    if (saveBtn) {\n        saveBtn.addEventListener('click', function() {\n            saveBtn.disabled = true;\n            saveBtn.textContent = <?php echo wp_json_encode( __( 'Saving...', 'kloktion-dutch-auction' ) ); ?>;\n\n            \/\/ First create SetupIntent\n            var fd = new FormData();\n            fd.append('action', 'kloktion_create_setup_intent');\n            fd.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n\n            fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                method: 'POST', body: fd, credentials: 'same-origin'\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (!r.success) throw new Error(r.data.message || 'Failed to create setup');\n                return stripe.confirmCardSetup(r.data.client_secret, {\n                    payment_method: { card: cardElement }\n                });\n            })\n            .then(function(result) {\n                if (result.error) throw new Error(result.error.message);\n\n                \/\/ Save the payment method\n                var fd2 = new FormData();\n                fd2.append('action', 'kloktion_save_card');\n                fd2.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n                fd2.append('payment_method_id', result.setupIntent.payment_method);\n                fd2.append('consent', consentBox && consentBox.checked ? '1' : '0');\n\n                return fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                    method: 'POST', body: fd2, credentials: 'same-origin'\n                });\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) {\n                    location.reload();\n                } else {\n                    throw new Error(r.data.message || 'Failed to save card');\n                }\n            })\n            .catch(function(err) {\n                errorsEl.textContent = err.message;\n                saveBtn.disabled = false;\n                saveBtn.textContent = <?php echo wp_json_encode( __( 'Save Card', 'kloktion-dutch-auction' ) ); ?>;\n            });\n        });\n    }\n\n    \/\/ Remove card\n    var removeBtn = document.getElementById('kloktion-remove-card');\n    if (removeBtn) {\n        removeBtn.addEventListener('click', function() {\n            if (!confirm(<?php echo wp_json_encode( __( 'Are you sure you want to remove your card?', 'kloktion-dutch-auction' ) ); ?>)) return;\n\n            var fd = new FormData();\n            fd.append('action', 'kloktion_remove_card');\n            fd.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n\n            fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                method: 'POST', body: fd, credentials: 'same-origin'\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) location.reload();\n            });\n        });\n    }\n})();\n<\/script>\n"},"result":null}
{"timestamp":"2026-03-30 14:38:04","ip":"2a01:4f8:110:1444::2","action":"cache_purge_all","params":[],"result":null}
{"timestamp":"2026-04-09 19:10:58","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-04-09 19:10:58","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-04-09 19:11:15","ip":"2a01:4f8:110:1444::2","action":"backup_create","params":[],"result":null}
{"timestamp":"2026-04-09 19:11:56","ip":"2a01:4f8:110:1444::2","action":"db_export","params":[],"result":null}
{"timestamp":"2026-04-27 16:08:40","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-04-27 16:08:40","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-04-27 16:09:08","ip":"2a01:4f8:110:1444::2","action":"checkpoint_create","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:08","ip":"2a01:4f8:110:1444::2","action":"checkpoint_create","params":[],"result":"fatal: Too few arguments to function WPRC_Checkpoints::checkpoint_create(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and at least 1 expected"}
{"timestamp":"2026-04-27 16:09:09","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:09","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:09","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::db_query(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:10","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:10","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:10","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:10","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:40","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:40","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:41","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:41","ip":"2a01:4f8:110:1444::2","action":"db_query","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::db_query(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:09:41","ip":"2a01:4f8:110:1444::2","action":"checkpoint_create","params":[],"result":null}
{"timestamp":"2026-04-27 16:09:41","ip":"2a01:4f8:110:1444::2","action":"checkpoint_create","params":[],"result":"fatal: Too few arguments to function WPRC_Checkpoints::checkpoint_create(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and at least 1 expected"}
{"timestamp":"2026-04-27 16:10:01","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:10:01","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:10:02","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:10:02","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:10:03","ip":"2a01:4f8:110:1444::2","action":"site_context","params":[],"result":null}
{"timestamp":"2026-04-27 16:10:03","ip":"2a01:4f8:110:1444::2","action":"site_context","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-04-27 16:14:18","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:18","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":"fatal: WPRC_Diagnostics::format_bytes(): Argument #1 ($bytes) must be of type int, null given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 770"}
{"timestamp":"2026-04-27 16:14:22","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:22","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:26","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:26","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:30","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"kloktion_db_version"},"result":null}
{"timestamp":"2026-04-27 16:14:30","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"kloktion_db_version"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-04-27 16:14:37","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:37","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:37","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:37","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:38","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:38","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:38","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:38","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:40","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:40","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:14:48","ip":"2a01:4f8:110:1444::2","action":"cron_list","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:54","ip":"2a01:4f8:110:1444::2","action":"cron_list","params":[],"result":null}
{"timestamp":"2026-04-27 16:14:59","ip":"2a01:4f8:110:1444::2","action":"cron_list","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:39","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:43","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:43","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:44","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:44","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:44","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:44","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:45","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:45","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:45","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:45","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:46","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":null}
{"timestamp":"2026-04-27 16:15:46","ip":"2a01:4f8:110:1444::2","action":"option_get","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::option_get(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}
{"timestamp":"2026-04-27 16:15:56","ip":"2a01:4f8:110:1444::2","action":"file_write","params":[],"result":null}
{"timestamp":"2026-04-27 16:16:00","ip":"2a01:4f8:110:1444::2","action":"file_write","params":[],"result":null}
{"timestamp":"2026-04-27 16:16:05","ip":"2a01:4f8:110:1444::2","action":"file_write","params":[],"result":null}
{"timestamp":"2026-04-27 16:16:06","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"klok_verify.php","content":"<?php echo 1;"},"result":null}
{"timestamp":"2026-04-27 16:16:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"klok_verify.php","content":"<?php\nrequire dirname(__FILE__).'\/wp-load.php';\nheader('Content-Type: application\/json');\n$settings = (array) get_option('kloktion_settings', []);\necho json_encode([\n    'db_version' => get_option('kloktion_db_version'),\n    'settings_keys' => array_keys($settings),\n    'has_stripe_keys' => [\n        'sk_live' => !empty($settings['stripe_secret_key']),\n        'pk_live' => !empty($settings['stripe_publishable_key']),\n    ],\n    'commission' => $settings['commission_percent'] ?? null,\n    'escrow_enabled' => $settings['escrow_enabled'] ?? null,\n    'moderation_enabled' => $settings['moderation_enabled'] ?? null,\n    'crons' => [\n        'check_auctions' => wp_next_scheduled('kloktion_check_auctions'),\n        'check_penalties' => wp_next_scheduled('kloktion_check_penalties'),\n        'auto_release_escrow' => wp_next_scheduled('kloktion_auto_release_escrow'),\n    ],\n    'tables' => array_map(function($t){\n        global $wpdb;\n        return $wpdb->get_var(\"SHOW TABLES LIKE '$t'\") === $t;\n    }, [\n        $GLOBALS['wpdb']->prefix.'kloktion_moderation_queue',\n        $GLOBALS['wpdb']->prefix.'kloktion_moderation_log',\n        $GLOBALS['wpdb']->prefix.'kloktion_escrow',\n        $GLOBALS['wpdb']->prefix.'kloktion_disputes',\n        $GLOBALS['wpdb']->prefix.'kloktion_bids',\n    ]),\n], JSON_PRETTY_PRINT|JSON_UNESCAPED_SLASHES);"},"result":null}
{"timestamp":"2026-04-27 16:17:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"klok_fix.php","content":"<?php\nrequire dirname(__FILE__).'\/wp-load.php';\nheader('Content-Type: application\/json');\nrequire_once WP_PLUGIN_DIR.'\/kloktion-dutch-auction\/includes\/class-installer.php';\n\n$before_settings_keys = array_keys((array) get_option('kloktion_settings', []));\n$before_cron = wp_next_scheduled('kloktion_auto_release_escrow');\n\n\\Kloktion\\Installer::activate();\n\necho json_encode([\n    'before' => [\n        'settings_keys' => $before_settings_keys,\n        'escrow_cron'   => $before_cron,\n    ],\n    'after' => [\n        'db_version'           => get_option('kloktion_db_version'),\n        'settings_keys'        => array_keys((array) get_option('kloktion_settings', [])),\n        'escrow_enabled'       => get_option('kloktion_settings')['escrow_enabled'] ?? null,\n        'moderation_enabled'   => get_option('kloktion_settings')['moderation_enabled'] ?? null,\n        'commission_percent'   => get_option('kloktion_settings')['commission_percent'] ?? null,\n        'auto_release_days'    => get_option('kloktion_settings')['auto_release_days'] ?? null,\n        'dispute_window_days'  => get_option('kloktion_settings')['dispute_window_days'] ?? null,\n        'cron_check_auctions'  => wp_next_scheduled('kloktion_check_auctions'),\n        'cron_check_penalties' => wp_next_scheduled('kloktion_check_penalties'),\n        'cron_auto_release'    => wp_next_scheduled('kloktion_auto_release_escrow'),\n    ],\n], JSON_PRETTY_PRINT);"},"result":null}
{"timestamp":"2026-04-27 16:17:45","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"klok_verify.php","content":"<?php \/\/ removed"},"result":null}
{"timestamp":"2026-04-27 16:17:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"klok_fix.php","content":"<?php \/\/ removed"},"result":null}
{"timestamp":"2026-04-27 16:17:47","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"klok_cleanup.php","content":"<?php @unlink(__DIR__.\"\/klok_verify.php\"); @unlink(__DIR__.\"\/klok_fix.php\"); @unlink(__FILE__); echo \"done\";"},"result":null}
{"timestamp":"2026-04-27 16:18:38","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-04-27 16:18:43","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-06 07:10:28","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-05-06 07:15:32","ip":"2a01:4f8:110:1444::2","action":"site_context","params":[],"result":null}
{"timestamp":"2026-05-06 07:15:43","ip":"2a01:4f8:110:1444::2","action":"maintenance_mode","params":[],"result":null}
{"timestamp":"2026-05-06 07:16:32","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"\/home\/kloktig\/www-new\/wp-content\/mu-plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Public visitors see a Coming Soon page; logged-in admins\/editors see the real site. Designed for the pre-launch period while Kloktion is under final testing with the client.\n * Version: 1.0.0\n * Author: LeoWebMarketing\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', function () {\n\tif ( is_user_logged_in() && current_user_can( 'edit_posts' ) ) {\n\t\treturn;\n\t}\n\tif ( wp_doing_ajax() || wp_doing_cron() ) {\n\t\treturn;\n\t}\n\tif ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {\n\t\treturn;\n\t}\n\tif ( defined( 'WP_CLI' ) && WP_CLI ) {\n\t\treturn;\n\t}\n\t$req = $_SERVER['REQUEST_URI'] ?? '';\n\tif ( strpos( $req, 'fast-auction' ) !== false ) {\n\t\treturn;\n\t}\n\tif ( strpos( $req, 'wp-login.php' ) !== false ) {\n\t\treturn;\n\t}\n\tif ( strpos( $req, '\/sk.php' ) === 0 ) {\n\t\treturn;\n\t}\n\n\tstatus_header( 503 );\n\tnocache_headers();\n\theader( 'Retry-After: 3600' );\n\theader( 'Content-Type: text\/html; charset=utf-8' );\n\t?>\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n<meta name=\"robots\" content=\"noindex,nofollow\">\n<title>Kloktion - Coming Soon<\/title>\n<style>\n*{box-sizing:border-box}\nbody{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:linear-gradient(135deg,#0f1419 0%,#1a2332 100%);color:#fff;font-family:-apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,Oxygen,Ubuntu,sans-serif;text-align:center;padding:24px}\n.wrap{max-width:560px}\n.logo{font-size:2.4rem;font-weight:700;letter-spacing:-0.02em;margin:0 0 8px;color:#fff}\n.tagline{font-size:1rem;color:#7a8694;margin:0 0 40px;letter-spacing:0.04em;text-transform:uppercase}\nh1{font-size:3.5rem;font-weight:700;margin:0 0 20px;letter-spacing:-0.03em;line-height:1.05}\np{font-size:1.15rem;color:#9ba6b3;line-height:1.6;margin:0 0 32px}\n.dot{display:inline-block;width:8px;height:8px;border-radius:50%;background:#4ade80;margin-right:8px;vertical-align:middle;animation:pulse 2s ease-in-out infinite}\n@keyframes pulse{0%,100%{opacity:1}50%{opacity:0.4}}\n.status{font-size:0.9rem;color:#7a8694;letter-spacing:0.06em;text-transform:uppercase}\n@media (max-width:480px){h1{font-size:2.4rem}.logo{font-size:1.8rem}}\n<\/style>\n<\/head>\n<body>\n<div class=\"wrap\">\n<div class=\"logo\">Kloktion<\/div>\n<div class=\"tagline\">Dutch auction marketplace<\/div>\n<h1>Launching soon<\/h1>\n<p>The platform is in final preparation. Please check back shortly to see the auctions go live.<\/p>\n<div class=\"status\"><span class=\"dot\"><\/span>Under construction<\/div>\n<\/div>\n<\/body>\n<\/html>\n\t<?php\n\texit;\n}, 0 );\n"},"result":null}
{"timestamp":"2026-05-06 07:16:38","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/mu-plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Public visitors see a Coming Soon page; logged-in admins\/editors see the real site. Designed for the pre-launch period while Kloktion is under final testing with the client.\n * Version: 1.0.0\n * Author: LeoWebMarketing\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', function () {\n\tif ( is_user_logged_in() && current_user_can( 'edit_posts' ) ) {\n\t\treturn;\n\t}\n\tif ( wp_doing_ajax() || wp_doing_cron() ) {\n\t\treturn;\n\t}\n\tif ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {\n\t\treturn;\n\t}\n\tif ( defined( 'WP_CLI' ) && WP_CLI ) {\n\t\treturn;\n\t}\n\t$req = $_SERVER['REQUEST_URI'] ?? '';\n\tif ( strpos( $req, 'fast-auction' ) !== false ) {\n\t\treturn;\n\t}\n\tif ( strpos( $req, 'wp-login.php' ) !== false ) {\n\t\treturn;\n\t}\n\tif ( strpos( $req, '\/sk.php' ) === 0 ) {\n\t\treturn;\n\t}\n\n\tstatus_header( 503 );\n\tnocache_headers();\n\theader( 'Retry-After: 3600' );\n\theader( 'Content-Type: text\/html; charset=utf-8' );\n\t?>\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n<meta name=\"robots\" content=\"noindex,nofollow\">\n<title>Kloktion - Coming Soon<\/title>\n<style>\n*{box-sizing:border-box}\nbody{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:linear-gradient(135deg,#0f1419 0%,#1a2332 100%);color:#fff;font-family:-apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,Oxygen,Ubuntu,sans-serif;text-align:center;padding:24px}\n.wrap{max-width:560px}\n.logo{font-size:2.4rem;font-weight:700;letter-spacing:-0.02em;margin:0 0 8px;color:#fff}\n.tagline{font-size:1rem;color:#7a8694;margin:0 0 40px;letter-spacing:0.04em;text-transform:uppercase}\nh1{font-size:3.5rem;font-weight:700;margin:0 0 20px;letter-spacing:-0.03em;line-height:1.05}\np{font-size:1.15rem;color:#9ba6b3;line-height:1.6;margin:0 0 32px}\n.dot{display:inline-block;width:8px;height:8px;border-radius:50%;background:#4ade80;margin-right:8px;vertical-align:middle;animation:pulse 2s ease-in-out infinite}\n@keyframes pulse{0%,100%{opacity:1}50%{opacity:0.4}}\n.status{font-size:0.9rem;color:#7a8694;letter-spacing:0.06em;text-transform:uppercase}\n@media (max-width:480px){h1{font-size:2.4rem}.logo{font-size:1.8rem}}\n<\/style>\n<\/head>\n<body>\n<div class=\"wrap\">\n<div class=\"logo\">Kloktion<\/div>\n<div class=\"tagline\">Dutch auction marketplace<\/div>\n<h1>Launching soon<\/h1>\n<p>The platform is in final preparation. Please check back shortly to see the auctions go live.<\/p>\n<div class=\"status\"><span class=\"dot\"><\/span>Under construction<\/div>\n<\/div>\n<\/body>\n<\/html>\n\t<?php\n\texit;\n}, 0 );\n"},"result":null}
{"timestamp":"2026-05-06 07:16:47","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/index.php"},"result":null}
{"timestamp":"2026-05-06 07:16:48","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/mu-plugins\/index.php"},"result":null}
{"timestamp":"2026-05-06 07:16:55","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Public visitors see a Coming Soon page; logged-in admins\/editors see the real site. Designed for the pre-launch period while Kloktion is under final testing with the client.\n * Version: 1.0.0\n * Author: LeoWebMarketing\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', function () {\n\tif ( is_user_logged_in() && current_user_can( 'edit_posts' ) ) {\n\t\treturn;\n\t}\n\tif ( wp_doing_ajax() || wp_doing_cron() ) {\n\t\treturn;\n\t}\n\tif ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {\n\t\treturn;\n\t}\n\tif ( defined( 'WP_CLI' ) && WP_CLI ) {\n\t\treturn;\n\t}\n\t$req = $_SERVER['REQUEST_URI'] ?? '';\n\tif ( strpos( $req, 'fast-auction' ) !== false ) {\n\t\treturn;\n\t}\n\tif ( strpos( $req, 'wp-login.php' ) !== false ) {\n\t\treturn;\n\t}\n\tif ( strpos( $req, '\/sk.php' ) === 0 ) {\n\t\treturn;\n\t}\n\n\tstatus_header( 503 );\n\tnocache_headers();\n\theader( 'Retry-After: 3600' );\n\theader( 'Content-Type: text\/html; charset=utf-8' );\n\t?>\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n<meta name=\"robots\" content=\"noindex,nofollow\">\n<title>Kloktion - Coming Soon<\/title>\n<style>\n*{box-sizing:border-box}\nbody{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:linear-gradient(135deg,#0f1419 0%,#1a2332 100%);color:#fff;font-family:-apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,Oxygen,Ubuntu,sans-serif;text-align:center;padding:24px}\n.wrap{max-width:560px}\n.logo{font-size:2.4rem;font-weight:700;letter-spacing:-0.02em;margin:0 0 8px;color:#fff}\n.tagline{font-size:1rem;color:#7a8694;margin:0 0 40px;letter-spacing:0.04em;text-transform:uppercase}\nh1{font-size:3.5rem;font-weight:700;margin:0 0 20px;letter-spacing:-0.03em;line-height:1.05}\np{font-size:1.15rem;color:#9ba6b3;line-height:1.6;margin:0 0 32px}\n.dot{display:inline-block;width:8px;height:8px;border-radius:50%;background:#4ade80;margin-right:8px;vertical-align:middle;animation:pulse 2s ease-in-out infinite}\n@keyframes pulse{0%,100%{opacity:1}50%{opacity:0.4}}\n.status{font-size:0.9rem;color:#7a8694;letter-spacing:0.06em;text-transform:uppercase}\n@media (max-width:480px){h1{font-size:2.4rem}.logo{font-size:1.8rem}}\n<\/style>\n<\/head>\n<body>\n<div class=\"wrap\">\n<div class=\"logo\">Kloktion<\/div>\n<div class=\"tagline\">Dutch auction marketplace<\/div>\n<h1>Launching soon<\/h1>\n<p>The platform is in final preparation. Please check back shortly to see the auctions go live.<\/p>\n<div class=\"status\"><span class=\"dot\"><\/span>Under construction<\/div>\n<\/div>\n<\/body>\n<\/html>\n\t<?php\n\texit;\n}, 0 );\n"},"result":null}
{"timestamp":"2026-05-06 07:17:00","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":{"plugin":"kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-06 07:17:00","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":{"plugin":"kloktion-coming-soon.php"},"result":"fatal: WPRC_Legacy::plugin_activate(): Argument #1 ($plugin) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-06 07:17:12","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-06 07:17:23","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-06 07:17:50","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"active_plugins"},"result":null}
{"timestamp":"2026-05-06 07:17:50","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"active_plugins"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-06 07:17:58","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["active_plugins"],"result":null}
{"timestamp":"2026-05-06 07:17:59","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"name":"active_plugins"},"result":null}
{"timestamp":"2026-05-06 07:17:59","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"name":"active_plugins"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-06 07:18:05","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":["kloktion-coming-soon.php"],"result":null}
{"timestamp":"2026-05-06 07:18:30","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 4px;\n    overflow: hidden;\n    background: #1a1a1a;\n}\n\n.kloktion-one-click__btn {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    padding: 0;\n    font-size: 15px;\n    font-weight: 600;\n    background: transparent;\n    color: #fff;\n    border: none;\n    border-radius: 4px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__thumb {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    background: rgba(255, 255, 255, 0.15);\n    border-right: 2px solid rgba(255, 255, 255, 0.3);\n    border-radius: 4px 0 0 4px;\n    pointer-events: none;\n}\n\n.kloktion-one-click__label {\n    pointer-events: none;\n    padding-left: 60px;\n}\n\n.kloktion-one-click__btn:hover .kloktion-one-click__thumb {\n    background: rgba(255, 255, 255, 0.25);\n}\n\n.kloktion-one-click__btn:disabled {\n    opacity: 0.5;\n    cursor: not-allowed;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === PADLOCK PROTECTION === *\/\n.kloktion-padlock {\n    display: flex;\n    align-items: center;\n    gap: 8px;\n    margin-bottom: 10px;\n}\n.kloktion-padlock__toggle {\n    background: #f0f0f0;\n    border: 2px solid #ddd;\n    border-radius: 20px;\n    padding: 6px 14px;\n    cursor: pointer;\n    font-size: 18px;\n    transition: all 0.3s ease;\n    display: flex;\n    align-items: center;\n}\n.kloktion-padlock__toggle:hover {\n    border-color: #4CAF50;\n    background: #e8f5e9;\n}\n.kloktion-padlock__label {\n    font-size: 13px;\n    color: #888;\n    font-style: italic;\n}\n.kloktion-one-click__track.kloktion-one-click__unlocked-track {\n    background: #1a1a1a;\n    animation: kloktion-pulse-buy-track 1.5s ease-in-out infinite;\n}\n.kloktion-one-click__btn--unlocked {\n    animation: kloktion-pulse-buy 1.5s ease-in-out infinite;\n}\n@keyframes kloktion-pulse-buy {\n    0%, 100% { box-shadow: 0 0 0 0 rgba(76, 175, 80, 0.4); }\n    50% { box-shadow: 0 0 0 8px rgba(76, 175, 80, 0); }\n}\n@keyframes kloktion-pulse-buy-track {\n    0%, 100% { box-shadow: 0 0 0 0 rgba(76, 175, 80, 0.4); }\n    50% { box-shadow: 0 0 0 8px rgba(76, 175, 80, 0); }\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"},"result":null}
{"timestamp":"2026-05-06 07:18:30","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        if (['sold', 'expired', 'stopped'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === PADLOCK PROTECTION === *\/\n(function() {\n    var padlock = document.getElementById('kloktion-padlock');\n    if (!padlock) return;\n\n    var toggle = padlock.querySelector('.kloktion-padlock__toggle');\n    var buyBtn = padlock.parentElement.querySelector('.kloktion-one-click__btn');\n    var lockedIcon = padlock.querySelector('.kloktion-padlock__icon--locked');\n    var unlockedIcon = padlock.querySelector('.kloktion-padlock__icon--unlocked');\n    var label = padlock.querySelector('.kloktion-padlock__label');\n    var isUnlocked = false;\n\n    if (!toggle || !buyBtn) return;\n\n    toggle.addEventListener('click', function() {\n        isUnlocked = !isUnlocked;\n\n        if (isUnlocked) {\n            lockedIcon.style.display = 'none';\n            unlockedIcon.style.display = '';\n            label.textContent = '';\n            buyBtn.disabled = false;\n            buyBtn.classList.add('kloktion-one-click__btn--unlocked');\n        } else {\n            lockedIcon.style.display = '';\n            unlockedIcon.style.display = 'none';\n            label.textContent = 'Slide to unlock purchase';\n            buyBtn.disabled = true;\n            buyBtn.classList.remove('kloktion-one-click__btn--unlocked');\n        }\n    });\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var track = btn.closest('.kloktion-one-click__track');\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n\n        function getThumbWidth() {\n            var thumb = btn.querySelector('.kloktion-one-click__thumb');\n            return thumb ? thumb.offsetWidth : 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return btn.querySelector('.kloktion-one-click__label');\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            btn.style.transform = '';\n            currentDelta = 0;\n        }\n\n        function fireBuy() {\n            if (btn.disabled) return;\n\n            var hasCard = btn.getAttribute('data-has-card');\n            var walletUrl = btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                snapBack();\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    btn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = 'Slide to Buy Now';\n                });\n                return;\n            }\n\n            btn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = btn.getAttribute('data-product-id');\n            var nonce = btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = btn.closest('.kloktion-one-click') ? btn.closest('.kloktion-one-click').querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    btn.disabled = false;\n                                    if (labelEl) labelEl.textContent = 'Slide to Buy Now';\n                                    snapBack();\n                                });\n                            } else {\n                                alert(msg);\n                                btn.disabled = false;\n                                if (labelEl) labelEl.textContent = 'Slide to Buy Now';\n                                snapBack();\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        btn.disabled = false;\n                        if (labelEl) labelEl.textContent = 'Slide to Buy Now';\n                        snapBack();\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackWidth = getTrackWidth();\n            var thumbWidth = getThumbWidth();\n            var maxDelta = Math.max(0, trackWidth - thumbWidth);\n            var delta = Math.min(Math.max(e.clientX - startX, 0), maxDelta);\n            currentDelta = delta;\n            btn.style.transform = 'translateX(' + delta + 'px)';\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackWidth = getTrackWidth();\n            var thumbWidth = getThumbWidth();\n            var threshold = 0.7 * Math.max(0, trackWidth - thumbWidth);\n            if (currentDelta >= threshold) {\n                fireBuy();\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                fireBuy();\n            }\n        });\n    });\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n"},"result":null}
{"timestamp":"2026-05-06 07:18:31","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-card-manager.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Card_Manager {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_save_card', [ self::class, 'handle_save_card' ] );\n        add_action( 'wp_ajax_kloktion_remove_card', [ self::class, 'handle_remove_card' ] );\n        add_action( 'wp_ajax_kloktion_create_setup_intent', [ self::class, 'create_setup_intent' ] );\n        add_action( 'wp_body_open', [ self::class, 'render_alert_banner' ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Reusable (REST + AJAX): SetupIntent\n    \/\/ -------------------------------------------------------------------------\n\n    \/**\n     * Create a SetupIntent for a given user. Returns client_secret string or WP_Error.\n     * Reusable from both AJAX and REST contexts.\n     *\/\n    public static function create_setup_intent_for_user( int $user_id ) {\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'kloktion_stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ), [ 'status' => 503 ] );\n        }\n        $customer_id = self::get_or_create_stripe_customer( $user_id );\n        if ( is_wp_error( $customer_id ) ) {\n            return $customer_id;\n        }\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/setup_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'customer' => $customer_id,\n                    'usage'    => 'off_session',\n                ],\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! empty( $body['error'] ) ) {\n            return new \\WP_Error(\n                'kloktion_stripe_error',\n                $body['error']['message'] ?? __( 'Stripe error.', 'kloktion-dutch-auction' ),\n                [ 'status' => 500 ]\n            );\n        }\n        return $body['client_secret'] ?? '';\n    }\n\n    \/**\n     * Save a payment method to a user (retrieve from Stripe, attach to customer, save meta).\n     * Extracted from handle_save_card for reuse via REST.\n     *\/\n    public static function save_payment_method( int $user_id, string $payment_method_id ) {\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'kloktion_stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ), [ 'status' => 503 ] );\n        }\n        $customer_id = self::get_or_create_stripe_customer( $user_id );\n        if ( is_wp_error( $customer_id ) ) {\n            return $customer_id;\n        }\n        \/\/ Retrieve PM details.\n        $response = wp_remote_get(\n            'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ),\n            [ 'headers' => [ 'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ) ] ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n        $pm = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! empty( $pm['error'] ) ) {\n            return new \\WP_Error( 'kloktion_stripe_error', $pm['error']['message'] ?? __( 'Could not retrieve card details.', 'kloktion-dutch-auction' ), [ 'status' => 500 ] );\n        }\n        \/\/ Attach to customer (idempotent if already attached).\n        if ( empty( $pm['customer'] ) || $pm['customer'] !== $customer_id ) {\n            $attach_response = wp_remote_post(\n                'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ) . '\/attach',\n                [\n                    'headers' => [ 'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ) ],\n                    'body'    => [ 'customer' => $customer_id ],\n                ]\n            );\n            if ( is_wp_error( $attach_response ) ) {\n                return $attach_response;\n            }\n        }\n        \/\/ Save meta (use same keys as handle_save_card for consistency).\n        $card = $pm['card'] ?? [];\n        update_user_meta( $user_id, '_kloktion_card_payment_method', $payment_method_id );\n        update_user_meta( $user_id, '_kloktion_card_last4', sanitize_text_field( $card['last4'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_brand', sanitize_text_field( $card['brand'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_month', (int) ( $card['exp_month'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_year', (int) ( $card['exp_year'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_saved_at', time() );\n        \/\/ Record consent if not already stored.\n        if ( ! self::has_consent( $user_id ) ) {\n            update_user_meta( $user_id, '_kloktion_penalty_consent', time() );\n        }\n        return true;\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: SetupIntent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function create_setup_intent(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $client_secret = self::create_setup_intent_for_user( $user_id );\n        if ( is_wp_error( $client_secret ) ) {\n            wp_send_json_error( [ 'message' => $client_secret->get_error_message() ], 500 );\n        }\n\n        wp_send_json_success( [ 'client_secret' => $client_secret ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Save card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_save_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        \/\/ Honeypot check - reject bots that fill the decoy field.\n        $hp_value = isset( $_POST['kloktion_website_url'] ) ? (string) $_POST['kloktion_website_url'] : '';\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/save-card value=%s', $ip, $ua, $hp_value ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = sanitize_text_field( $_POST['payment_method_id'] ?? '' );\n        if ( empty( $payment_method_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Missing payment method.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n\n        $result = self::save_payment_method( $user_id, $payment_method_id );\n        if ( is_wp_error( $result ) ) {\n            wp_send_json_error( [ 'message' => $result->get_error_message() ], 500 );\n        }\n\n        \/\/ Persist explicit consent (AJAX flow only \u2014 REST flow auto-records on save).\n        $consent = sanitize_text_field( $_POST['consent'] ?? '' );\n        if ( '1' === $consent && ! self::has_consent( $user_id ) ) {\n            self::record_consent( $user_id );\n        }\n\n        wp_send_json_success( [\n            'message' => __( 'Card saved successfully.', 'kloktion-dutch-auction' ),\n            'card'    => self::get_card_info( $user_id ),\n        ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Remove card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_remove_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n\n        if ( ! empty( $payment_method_id ) ) {\n            $secret_key = self::get_stripe_secret_key();\n\n            if ( ! empty( $secret_key ) ) {\n                wp_remote_post(\n                    'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ) . '\/detach',\n                    [\n                        'headers' => [\n                            'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                        ],\n                    ]\n                );\n            }\n        }\n\n        delete_user_meta( $user_id, '_kloktion_card_payment_method' );\n        delete_user_meta( $user_id, '_kloktion_card_last4' );\n        delete_user_meta( $user_id, '_kloktion_card_brand' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_month' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_year' );\n        delete_user_meta( $user_id, '_kloktion_card_saved_at' );\n        delete_user_meta( $user_id, '_kloktion_penalty_consent' );\n\n        wp_send_json_success( [ 'message' => __( 'Card removed.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Card validation helpers\n    \/\/ -------------------------------------------------------------------------\n\n    public static function has_valid_card( int $user_id ): bool {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return false;\n        }\n\n        $exp_month = (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true );\n        $exp_year  = (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true );\n\n        $now_month = (int) date( 'n' );\n        $now_year  = (int) date( 'Y' );\n\n        return ( $exp_year > $now_year ) || ( $exp_year === $now_year && $exp_month >= $now_month );\n    }\n\n    public static function get_card_info( int $user_id ): ?array {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return null;\n        }\n\n        return [\n            'last4'     => get_user_meta( $user_id, '_kloktion_card_last4', true ),\n            'brand'     => get_user_meta( $user_id, '_kloktion_card_brand', true ),\n            'exp_month' => (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true ),\n            'exp_year'  => (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true ),\n        ];\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Consent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function record_consent( int $user_id ): void {\n        global $wpdb;\n\n        $wpdb->insert(\n            $wpdb->prefix . 'kloktion_card_consents',\n            [\n                'user_id'      => $user_id,\n                'consent_type' => 'penalty_terms',\n                'ip_address'   => self::get_client_ip(),\n                'accepted_at'  => current_time( 'mysql' ),\n            ],\n            [ '%d', '%s', '%s', '%s' ]\n        );\n\n        update_user_meta( $user_id, '_kloktion_penalty_consent', time() );\n    }\n\n    public static function has_consent( int $user_id ): bool {\n        return (bool) get_user_meta( $user_id, '_kloktion_penalty_consent', true );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Penalty charge\n    \/\/ -------------------------------------------------------------------------\n\n    public static function charge_penalty( int $user_id, int $order_id, float $amount ): bool {\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $payment_method_id ) ) {\n            return false;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return false;\n        }\n\n        $currency = strtolower( get_woocommerce_currency() );\n        $amount_cents = (int) round( $amount * 100 );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/payment_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'amount'               => $amount_cents,\n                    'currency'             => $currency,\n                    'payment_method'       => $payment_method_id,\n                    'customer'             => self::get_or_create_stripe_customer( $user_id ),\n                    'off_session'          => 'true',\n                    'confirm'              => 'true',\n                    'description'          => sprintf(\n                        'Kloktion penalty \u2014 Order #%d',\n                        $order_id\n                    ),\n                    'metadata[order_id]'   => $order_id,\n                    'metadata[user_id]'    => $user_id,\n                    'metadata[type]'       => 'penalty',\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $response->get_error_message(),\n            ] );\n            return false;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $body['error']['message'] ?? 'Unknown Stripe error',\n            ] );\n            return false;\n        }\n\n        if ( ( $body['status'] ?? '' ) === 'succeeded' ) {\n            update_post_meta( $order_id, '_kloktion_penalty_intent_' . time(), $body['id'] ?? '' );\n            return true;\n        }\n\n        return false;\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Alert banner\n    \/\/ -------------------------------------------------------------------------\n\n    public static function render_alert_banner(): void {\n        if ( is_admin() ) {\n            return;\n        }\n\n        if ( function_exists( 'dokan_is_seller_dashboard' ) && dokan_is_seller_dashboard() ) {\n            return;\n        }\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        if ( self::has_valid_card( $user_id ) ) {\n            return;\n        }\n\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-alert-banner\">%s <a href=\"%s\">%s<\/a><\/div>',\n            esc_html__( 'Unverified account: Register a card to participate in auctions.', 'kloktion-dutch-auction' ),\n            esc_url( $wallet_url ),\n            esc_html__( 'My Wallet', 'kloktion-dutch-auction' )\n        );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Private helpers\n    \/\/ -------------------------------------------------------------------------\n\n    private static function get_stripe_secret_key(): string {\n        $stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n        $test_mode       = ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes';\n\n        return $test_mode\n            ? ( $stripe_settings['test_secret_key'] ?? '' )\n            : ( $stripe_settings['secret_key'] ?? '' );\n    }\n\n    private static function get_or_create_stripe_customer( int $user_id ): string|\\WP_Error {\n        $customer_id = get_user_meta( $user_id, '_stripe_customer_id', true );\n\n        if ( ! empty( $customer_id ) ) {\n            return $customer_id;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) );\n        }\n\n        $user = get_userdata( $user_id );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/customers',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'email'       => $user->user_email ?? '',\n                    'name'        => trim( ( $user->first_name ?? '' ) . ' ' . ( $user->last_name ?? '' ) ),\n                    'description' => 'Kloktion user ID ' . $user_id,\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            return new \\WP_Error( 'stripe_error', $body['error']['message'] ?? __( 'Stripe customer creation failed.', 'kloktion-dutch-auction' ) );\n        }\n\n        $customer_id = $body['id'] ?? '';\n\n        if ( ! empty( $customer_id ) ) {\n            update_user_meta( $user_id, '_stripe_customer_id', $customer_id );\n        }\n\n        return $customer_id;\n    }\n\n    private static function get_client_ip(): string {\n        if ( class_exists( '\\WC_Geolocation' ) ) {\n            return \\WC_Geolocation::get_ip_address();\n        }\n\n        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-06 07:18:31","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <div class=\"kloktion-padlock\" id=\"kloktion-padlock\">\n            <button type=\"button\" class=\"kloktion-padlock__toggle\" title=\"%s\">\n                <span class=\"kloktion-padlock__icon kloktion-padlock__icon--locked\">\ud83d\udd12<\/span>\n                <span class=\"kloktion-padlock__icon kloktion-padlock__icon--unlocked\" style=\"display:none;\">\ud83d\udd13<\/span>\n            <\/button>\n            <span class=\"kloktion-padlock__label\">%s<\/span>\n        <\/div>\n        <div class=\"kloktion-one-click__track\">\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" disabled>\n                <span class=\"kloktion-one-click__thumb\" aria-hidden=\"true\"><\/span>\n                <span class=\"kloktion-one-click__label\">%s<\/span>\n            <\/button>\n        <\/div>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_attr__( 'Unlock to enable purchase', 'kloktion-dutch-auction' ),\n            esc_html__( 'Slide to unlock purchase', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_html__( 'Slide to Buy Now', 'kloktion-dutch-auction' ),\n            esc_html__( 'Unlock the padlock first, then slide to Buy Now', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            \/\/ --- Escrow \/ destination-charge path (Contract 3) ---\n            $escrow_enabled = ! empty( $settings['escrow_enabled'] );\n\n            if ( $escrow_enabled && class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n                $payment_result = \\Kloktion\\Stripe_Payment::create_destination_payment_intent( $order, $product_id );\n\n                if ( is_wp_error( $payment_result ) ) {\n                    Checkout_Handler::release_lock( $product_id );\n                    $order->update_status( 'cancelled', $payment_result->get_error_message() );\n                    wp_send_json_error( [ 'message' => $payment_result->get_error_message() ] );\n                    return;\n                }\n\n                if ( $payment_result['status'] === 'succeeded' ) {\n                    \/\/ Payment already complete \u2014 lock will be released by sell_auction hook.\n                    wp_send_json_success( [\n                        'redirect' => $order->get_checkout_order_received_url(),\n                        'order_id' => $order->get_id(),\n                        'message'  => __( 'Payment successful!', 'kloktion-dutch-auction' ),\n                    ] );\n                    return;\n                }\n\n                if ( $payment_result['status'] === 'requires_action' ) {\n                    \/\/ Return client_secret for 3DS confirmation on the frontend.\n                    wp_send_json_success( [\n                        'requires_action'    => true,\n                        'client_secret'      => $payment_result['client_secret'],\n                        'payment_intent_id'  => $payment_result['payment_intent_id'],\n                        'order_id'           => $order->get_id(),\n                    ] );\n                    return;\n                }\n\n                \/\/ Any other status (processing, requires_payment_method, etc.)\n                \/\/ falls through to the standard checkout URL below.\n            }\n            \/\/ --- End escrow path ---\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-06 07:18:32","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-rest-api.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Rest_Api {\n\n    public static function register_routes(): void {\n        register_rest_route( 'kloktion\/v1', '\/auction\/(?P<id>\\d+)', [\n            'methods'             => 'GET',\n            'callback'            => [ __CLASS__, 'get_auction' ],\n            'permission_callback' => '__return_true',\n            'args'                => [\n                'id' => [ 'type' => 'integer', 'required' => true, 'sanitize_callback' => 'absint' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/auctions', [\n            'methods'             => 'GET',\n            'callback'            => [ __CLASS__, 'get_auctions' ],\n            'permission_callback' => '__return_true',\n            'args'                => [\n                'status'   => [ 'type' => 'string', 'default' => 'active', 'sanitize_callback' => 'sanitize_text_field' ],\n                'per_page' => [ 'type' => 'integer', 'default' => 20, 'sanitize_callback' => 'absint' ],\n                'page'     => [ 'type' => 'integer', 'default' => 1, 'sanitize_callback' => 'absint' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/auction\/(?P<id>\\d+)\/stop', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'stop_auction' ],\n            'permission_callback' => [ __CLASS__, 'admin_permission' ],\n            'args'                => [\n                'id'     => [ 'type' => 'integer', 'required' => true, 'sanitize_callback' => 'absint' ],\n                'reason' => [ 'type' => 'string', 'required' => true, 'sanitize_callback' => 'sanitize_text_field' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/card\/status', [\n            'methods'             => 'GET',\n            'callback'            => [ __CLASS__, 'get_card_status' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/card\/setup-intent', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_card_setup_intent' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/card\/attach', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_card_attach' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n            'args'                => [\n                'payment_method' => [ 'required' => true, 'type' => 'string', 'sanitize_callback' => 'sanitize_text_field' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/escrow\/(?P<id>\\d+)\/confirm', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_escrow_confirm' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n            'args'                => [\n                'id' => [ 'validate_callback' => [ __CLASS__, 'validate_numeric_arg' ] ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/escrow\/(?P<id>\\d+)\/dispute', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_escrow_dispute' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n            'args'                => [\n                'id'     => [ 'validate_callback' => [ __CLASS__, 'validate_numeric_arg' ] ],\n                'reason' => [ 'required' => true, 'type' => 'string' ],\n            ],\n        ] );\n\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Webhook' ) ) {\n            \\Kloktion\\Stripe_Webhook::register_route();\n        }\n    }\n\n    public static function admin_permission(): bool {\n        return current_user_can( 'manage_woocommerce' );\n    }\n\n    \/**\n     * REST validate_callback wrapper for numeric IDs. WP passes 3 args to validate_callback\n     * but PHP 8+ fails if using bare 'is_numeric' name. Accept all args, validate first.\n     *\/\n    public static function validate_numeric_arg( $value, $request = null, $param = null ): bool {\n        return is_numeric( $value );\n    }\n\n    \/**\n     * Honeypot check - rejects any request where the decoy field is filled.\n     * Returns true if the request is clean, WP_Error on bot detection.\n     *\/\n    private static function check_honeypot( $request = null ) {\n        $rest_val  = ( $request && method_exists( $request, 'get_param' ) ) ? (string) $request->get_param( 'website_url' ) : '';\n        $post_val  = isset( $_POST['kloktion_website_url'] ) ? (string) $_POST['kloktion_website_url'] : '';\n        $value     = $rest_val !== '' ? $rest_val : $post_val;\n\n        if ( $value !== '' ) {\n            $ip        = self::get_client_ip();\n            $ua        = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $product   = ( $request && method_exists( $request, 'get_param' ) ) ? (int) $request->get_param( 'id' ) : 0;\n            $endpoint  = ( $request && method_exists( $request, 'get_route' ) ) ? $request->get_route() : 'admin-ajax';\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=%s value=%s product=%d', $ip, $ua, $endpoint, $value, $product ) );\n            return new \\WP_Error( 'honeypot_tripped', 'Forbidden', [ 'status' => 403 ] );\n        }\n\n        return true;\n    }\n\n    private static function check_rate_limit(): bool {\n        $ip = self::get_client_ip();\n        $key     = 'kloktion_rate_' . md5( $ip );\n        $count   = (int) get_transient( $key );\n        $settings = get_option( 'kloktion_settings', [] );\n        $limit   = (int) ( $settings['rate_limit'] ?? 60 );\n\n        if ( $count >= $limit ) {\n            return false;\n        }\n\n        set_transient( $key, $count + 1, 60 );\n        return true;\n    }\n\n    private static function get_client_ip(): string {\n        \/\/ prefer WC_Geolocation (handles Cloudflare\/proxies)\n        if ( class_exists( '\\WC_Geolocation' ) ) {\n            $ip = \\WC_Geolocation::get_ip_address();\n            if ( $ip ) {\n                return $ip;\n            }\n        }\n        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';\n    }\n\n    public static function get_auction( \\WP_REST_Request $request ): \\WP_REST_Response {\n        if ( ! self::check_rate_limit() ) {\n            $response = new \\WP_REST_Response( [ 'code' => 'rate_limited', 'message' => 'Too many requests' ], 429 );\n            $response->header( 'Retry-After', '60' );\n            return $response;\n        }\n\n        $product_id = $request->get_param( 'id' );\n\n        $cache_key = 'kloktion_api_' . $product_id;\n        $cached    = get_transient( $cache_key );\n        if ( false !== $cached ) {\n            return new \\WP_REST_Response( $cached, 200 );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            return new \\WP_REST_Response( [ 'code' => 'not_found', 'message' => 'Auction not found' ], 404 );\n        }\n\n        $data = self::format_auction( $product );\n\n        set_transient( $cache_key, $data, 2 );\n\n        return new \\WP_REST_Response( $data, 200 );\n    }\n\n    public static function get_auctions( \\WP_REST_Request $request ): \\WP_REST_Response {\n        if ( ! self::check_rate_limit() ) {\n            $response = new \\WP_REST_Response( [ 'code' => 'rate_limited', 'message' => 'Too many requests' ], 429 );\n            $response->header( 'Retry-After', '60' );\n            return $response;\n        }\n\n        $status   = $request->get_param( 'status' );\n        $per_page = max( 1, min( (int) $request->get_param( 'per_page' ), 100 ) );\n        $page     = max( 1, (int) $request->get_param( 'page' ) );\n\n        global $wpdb;\n\n        $valid_statuses = [ 'active', 'paused', 'scheduled', 'sold', 'expired', 'stopped' ];\n        if ( ! in_array( $status, $valid_statuses, true ) ) {\n            $status = 'active';\n        }\n\n        $total = (int) $wpdb->get_var(\n            $wpdb->prepare(\n                \"SELECT COUNT(DISTINCT pm.post_id)\n                 FROM {$wpdb->postmeta} pm\n                 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                 WHERE pm.meta_key = '_kloktion_status'\n                   AND pm.meta_value = %s\n                   AND p.post_status = 'publish'\",\n                $status\n            )\n        );\n\n        $offset     = ( $page - 1 ) * $per_page;\n        $product_ids = $wpdb->get_col(\n            $wpdb->prepare(\n                \"SELECT pm.post_id\n                 FROM {$wpdb->postmeta} pm\n                 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                 WHERE pm.meta_key = '_kloktion_status'\n                   AND pm.meta_value = %s\n                   AND p.post_status = 'publish'\n                 ORDER BY p.ID DESC\n                 LIMIT %d OFFSET %d\",\n                $status,\n                $per_page,\n                $offset\n            )\n        );\n\n        $auctions = [];\n        foreach ( $product_ids as $pid ) {\n            $product = wc_get_product( (int) $pid );\n            if ( $product instanceof Product_Type ) {\n                $auctions[] = self::format_auction( $product );\n            }\n        }\n\n        $response = new \\WP_REST_Response( $auctions, 200 );\n        $response->header( 'X-WP-Total', $total );\n        $response->header( 'X-WP-TotalPages', ceil( $total \/ $per_page ) );\n\n        return $response;\n    }\n\n    public static function stop_auction( \\WP_REST_Request $request ): \\WP_REST_Response {\n        $product_id = $request->get_param( 'id' );\n        $reason     = $request->get_param( 'reason' );\n\n        if ( empty( $reason ) ) {\n            return new \\WP_REST_Response( [ 'code' => 'missing_reason', 'message' => 'Reason is required' ], 400 );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            return new \\WP_REST_Response( [ 'code' => 'not_found', 'message' => 'Auction not found' ], 404 );\n        }\n\n        $result = Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( ! $result ) {\n            return new \\WP_REST_Response( [ 'code' => 'cannot_stop', 'message' => 'Auction cannot be stopped in its current state' ], 400 );\n        }\n\n        return new \\WP_REST_Response( [ 'success' => true, 'message' => 'Auction stopped' ], 200 );\n    }\n\n    public static function get_card_status( \\WP_REST_Request $request ): \\WP_REST_Response {\n        $user_id = get_current_user_id();\n\n        return new \\WP_REST_Response( [\n            'has_card'   => Card_Manager::has_valid_card( $user_id ),\n            'has_consent'=> Card_Manager::has_consent( $user_id ),\n            'card_info'  => Card_Manager::get_card_info( $user_id ),\n        ], 200 );\n    }\n\n    public static function handle_card_setup_intent( \\WP_REST_Request $request ) {\n        $hp = self::check_honeypot( $request );\n        if ( is_wp_error( $hp ) ) {\n            return $hp;\n        }\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return new \\WP_Error( 'kloktion_auth_required', __( 'You must be logged in.', 'kloktion-dutch-auction' ), [ 'status' => 401 ] );\n        }\n        $client_secret = Card_Manager::create_setup_intent_for_user( $user_id );\n        if ( is_wp_error( $client_secret ) ) {\n            return $client_secret;\n        }\n        return new \\WP_REST_Response( [ 'client_secret' => $client_secret ], 200 );\n    }\n\n    public static function handle_card_attach( \\WP_REST_Request $request ) {\n        $hp = self::check_honeypot( $request );\n        if ( is_wp_error( $hp ) ) {\n            return $hp;\n        }\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return new \\WP_Error( 'kloktion_auth_required', __( 'You must be logged in.', 'kloktion-dutch-auction' ), [ 'status' => 401 ] );\n        }\n        $pm = $request->get_param( 'payment_method' );\n        if ( empty( $pm ) ) {\n            return new \\WP_Error( 'kloktion_missing_pm', __( 'Missing payment method.', 'kloktion-dutch-auction' ), [ 'status' => 400 ] );\n        }\n        $result = Card_Manager::save_payment_method( $user_id, sanitize_text_field( $pm ) );\n        if ( is_wp_error( $result ) ) {\n            return $result;\n        }\n        return new \\WP_REST_Response( [ 'success' => true ], 200 );\n    }\n\n    public static function handle_escrow_confirm( \\WP_REST_Request $request ): \\WP_REST_Response {\n        global $wpdb;\n        $escrow_id = (int) $request['id'];\n        $user_id   = get_current_user_id();\n\n        $escrow = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_escrow WHERE id = %d\",\n            $escrow_id\n        ) );\n\n        if ( ! $escrow ) {\n            return new \\WP_REST_Response( [ 'message' => 'Escrow not found' ], 404 );\n        }\n\n        \/\/ Verify buyer owns this order.\n        $order = wc_get_order( $escrow->order_id );\n        if ( ! $order || (int) $order->get_customer_id() !== $user_id ) {\n            return new \\WP_REST_Response( [ 'message' => 'Permission denied' ], 403 );\n        }\n\n        if ( 'held' !== $escrow->status ) {\n            return new \\WP_REST_Response( [ 'message' => 'Escrow cannot be confirmed in current state' ], 400 );\n        }\n\n        if ( ! class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            return new \\WP_Error(\n                'kloktion_stripe_unavailable',\n                __( 'Payment system unavailable. Please try again shortly.', 'kloktion-dutch-auction' ),\n                [ 'status' => 503 ]\n            );\n        }\n\n        $result = \\Kloktion\\Stripe_Payment::release_escrow( $escrow_id, 'buyer_confirmed' );\n        if ( is_wp_error( $result ) ) {\n            $error_data = $result->get_error_data();\n            $status     = is_array( $error_data ) && ! empty( $error_data['status'] ) ? (int) $error_data['status'] : 400;\n            return new \\WP_REST_Response(\n                [ 'success' => false, 'message' => $result->get_error_message() ],\n                $status\n            );\n        }\n\n        do_action( 'kloktion_buyer_confirmed_receipt', $escrow_id );\n\n        return new \\WP_REST_Response( [ 'success' => true, 'message' => 'Receipt confirmed. Funds released to seller.' ], 200 );\n    }\n\n    public static function handle_escrow_dispute( \\WP_REST_Request $request ): \\WP_REST_Response {\n        global $wpdb;\n        $escrow_id = (int) $request['id'];\n        $reason    = sanitize_textarea_field( $request['reason'] ?? '' );\n        $user_id   = get_current_user_id();\n\n        if ( strlen( $reason ) < 10 ) {\n            return new \\WP_REST_Response( [ 'message' => 'Please provide a detailed reason (min 10 characters)' ], 400 );\n        }\n\n        $escrow = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_escrow WHERE id = %d\",\n            $escrow_id\n        ) );\n\n        if ( ! $escrow ) {\n            return new \\WP_REST_Response( [ 'message' => 'Escrow not found' ], 404 );\n        }\n\n        $order = wc_get_order( $escrow->order_id );\n        if ( ! $order || (int) $order->get_customer_id() !== $user_id ) {\n            return new \\WP_REST_Response( [ 'message' => 'Permission denied' ], 403 );\n        }\n\n        if ( 'held' !== $escrow->status ) {\n            return new \\WP_REST_Response( [ 'message' => 'Cannot dispute in current state' ], 400 );\n        }\n\n        \/\/ Check for an existing open dispute.\n        $existing = $wpdb->get_var( $wpdb->prepare(\n            \"SELECT id FROM {$wpdb->prefix}kloktion_disputes WHERE escrow_id = %d AND status = 'open'\",\n            $escrow_id\n        ) );\n        if ( $existing ) {\n            return new \\WP_REST_Response( [ 'message' => 'A dispute is already open for this order' ], 400 );\n        }\n\n        \/\/ Insert dispute record.\n        $wpdb->insert( $wpdb->prefix . 'kloktion_disputes', [\n            'escrow_id'  => $escrow_id,\n            'order_id'   => $escrow->order_id,\n            'user_id'    => $user_id,\n            'reason'     => $reason,\n            'status'     => 'open',\n            'created_at' => current_time( 'mysql' ),\n        ] );\n\n        \/\/ Update escrow status.\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_escrow',\n            [ 'status' => 'disputed', 'updated_at' => current_time( 'mysql' ) ],\n            [ 'id' => $escrow_id ]\n        );\n        update_post_meta( $escrow->order_id, '_kloktion_escrow_status', 'disputed' );\n\n        do_action( 'kloktion_dispute_opened_by_buyer', $escrow_id, $user_id, $reason );\n\n        return new \\WP_REST_Response( [ 'success' => true, 'message' => 'Dispute opened. Our team will review it shortly.' ], 200 );\n    }\n\n    private static function format_auction( Product_Type $product ): array {\n        $id            = $product->get_id();\n        $status        = $product->get_auction_status();\n        $current_price = Auction_Engine::calculate_price( $id );\n        $start_price   = (float) get_post_meta( $id, '_kloktion_start_price', true );\n        $reserve_price = (float) get_post_meta( $id, '_kloktion_reserve_price', true );\n\n        $data = [\n            'product_id'     => $id,\n            'title'          => $product->get_name(),\n            'status'         => $status,\n            'current_price'  => $current_price,\n            'formatted_price'=> strip_tags( wc_price( $current_price ) ),\n            'start_price'    => $start_price,\n            'reserve_price'  => $reserve_price,\n            'time_remaining' => Auction_Engine::get_time_remaining( $id ),\n            'progress'       => Auction_Engine::get_progress( $id ),\n            'can_purchase'   => $product->is_purchasable() && $product->is_in_stock(),\n        ];\n\n        if ( 'paused' === $status ) {\n            $data['pause_remaining'] = Auction_Engine::get_time_remaining( $id );\n        }\n\n        if ( 'sold' === $status ) {\n            $data['sold_price'] = (float) get_post_meta( $id, '_kloktion_sold_price', true );\n        }\n\n        return $data;\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-06 07:18:33","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/myaccount\/my-wallet.php","content":"<?php\ndefined( 'ABSPATH' ) || exit;\n\n$stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n$publishable_key = ( ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes' )\n    ? ( $stripe_settings['test_publishable_key'] ?? '' )\n    : ( $stripe_settings['publishable_key'] ?? '' );\n?>\n\n<div class=\"kloktion-wallet\">\n    <h3><?php esc_html_e( 'Payment Card', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <?php if ( $card_info ) : ?>\n        <div class=\"kloktion-wallet__card\">\n            <div class=\"kloktion-wallet__card-icon\">\n                <span class=\"kloktion-wallet__brand\"><?php echo esc_html( ucfirst( $card_info['brand'] ) ); ?><\/span>\n            <\/div>\n            <div class=\"kloktion-wallet__card-details\">\n                <span class=\"kloktion-wallet__last4\">&bull;&bull;&bull;&bull; &bull;&bull;&bull;&bull; &bull;&bull;&bull;&bull; <?php echo esc_html( $card_info['last4'] ); ?><\/span>\n                <span class=\"kloktion-wallet__expiry\">\n                    <?php\n                    printf(\n                        esc_html__( 'Expires %s\/%s', 'kloktion-dutch-auction' ),\n                        esc_html( str_pad( $card_info['exp_month'], 2, '0', STR_PAD_LEFT ) ),\n                        esc_html( $card_info['exp_year'] )\n                    );\n                    ?>\n                <\/span>\n            <\/div>\n            <div class=\"kloktion-wallet__card-actions\">\n                <button type=\"button\" class=\"button kloktion-wallet__change-btn\" id=\"kloktion-change-card\">\n                    <?php esc_html_e( 'Change Card', 'kloktion-dutch-auction' ); ?>\n                <\/button>\n                <button type=\"button\" class=\"button kloktion-wallet__remove-btn\" id=\"kloktion-remove-card\">\n                    <?php esc_html_e( 'Remove Card', 'kloktion-dutch-auction' ); ?>\n                <\/button>\n            <\/div>\n        <\/div>\n    <?php else : ?>\n        <div class=\"kloktion-wallet__no-card\">\n            <p><?php esc_html_e( 'No payment card registered. Add a card to participate in auctions.', 'kloktion-dutch-auction' ); ?><\/p>\n        <\/div>\n    <?php endif; ?>\n\n    <div class=\"kloktion-wallet__consent\" id=\"kloktion-consent-section\">\n        <label class=\"kloktion-wallet__consent-label\">\n            <input type=\"checkbox\" id=\"kloktion-consent-checkbox\" <?php echo $has_consent ? 'checked disabled' : ''; ?> \/>\n            <?php esc_html_e( 'I accept the terms and conditions and acknowledge that late payment will incur a penalty of 5% per week on the value of the item.', 'kloktion-dutch-auction' ); ?>\n        <\/label>\n    <\/div>\n\n    <div class=\"kloktion-wallet__add-form\" id=\"kloktion-card-form\" style=\"<?php echo $card_info ? 'display:none;' : ''; ?>\">\n        <div id=\"kloktion-card-element\"><\/div>\n        <div id=\"kloktion-card-errors\" class=\"kloktion-wallet__errors\"><\/div>\n        <div class=\"kloktion-honeypot\" aria-hidden=\"true\">\n            <label for=\"kloktion_website_url\">Website<\/label>\n            <input type=\"text\" name=\"kloktion_website_url\" id=\"kloktion_website_url\" tabindex=\"-1\" autocomplete=\"off\" value=\"\">\n        <\/div>\n        <button type=\"button\" class=\"button alt kloktion-wallet__save-btn\" id=\"kloktion-save-card\" <?php echo ( ! $has_consent ) ? 'disabled' : ''; ?>>\n            <?php esc_html_e( 'Save Card', 'kloktion-dutch-auction' ); ?>\n        <\/button>\n    <\/div>\n\n    <div class=\"kloktion-wallet__badge\">\n        <span class=\"kloktion-secure-badge\">&#x1F512; <?php esc_html_e( 'Secure Payment via Bank Fingerprint', 'kloktion-dutch-auction' ); ?><\/span>\n        <p class=\"kloktion-wallet__note\"><?php esc_html_e( 'Your card details are securely stored by Stripe. We never see or store your full card number.', 'kloktion-dutch-auction' ); ?><\/p>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    var publishableKey = <?php echo wp_json_encode( $publishable_key ); ?>;\n    if (!publishableKey) return;\n\n    var __klokAttempts = 0;\n    function initWallet() {\n        if (typeof Stripe === 'undefined') {\n            \/\/ Stripe.js is enqueued in footer; wait until it loads. Cap at 5 seconds.\n            if (__klokAttempts++ < 50) {\n                setTimeout(initWallet, 100);\n            } else {\n                var errEl = document.getElementById('kloktion-card-errors');\n                if (errEl) errEl.textContent = 'Payment library failed to load. Please refresh the page.';\n            }\n            return;\n        }\n        startWallet();\n    }\n\n    if (document.readyState === 'loading') {\n        document.addEventListener('DOMContentLoaded', initWallet);\n    } else {\n        initWallet();\n    }\n\n    function startWallet() {\n    var stripe = Stripe(publishableKey);\n    var elements = stripe.elements();\n    var cardElement = elements.create('card', {\n        hidePostalCode: true,\n        style: {\n            base: {\n                fontSize: '16px',\n                color: '#32325d',\n                '::placeholder': { color: '#aab7c4' }\n            }\n        }\n    });\n\n    var cardForm = document.getElementById('kloktion-card-form');\n    var cardMount = document.getElementById('kloktion-card-element');\n    if (cardMount) cardElement.mount('#kloktion-card-element');\n\n    var errorsEl = document.getElementById('kloktion-card-errors');\n    cardElement.on('change', function(event) {\n        errorsEl.textContent = event.error ? event.error.message : '';\n    });\n\n    \/\/ Consent checkbox enables save button\n    var consentBox = document.getElementById('kloktion-consent-checkbox');\n    var saveBtn = document.getElementById('kloktion-save-card');\n    if (consentBox) {\n        consentBox.addEventListener('change', function() {\n            saveBtn.disabled = !this.checked;\n        });\n    }\n\n    \/\/ Change card button\n    var changeBtn = document.getElementById('kloktion-change-card');\n    if (changeBtn) {\n        changeBtn.addEventListener('click', function() {\n            cardForm.style.display = '';\n        });\n    }\n\n    \/\/ Save card\n    if (saveBtn) {\n        saveBtn.addEventListener('click', function() {\n            saveBtn.disabled = true;\n            saveBtn.textContent = <?php echo wp_json_encode( __( 'Saving...', 'kloktion-dutch-auction' ) ); ?>;\n\n            \/\/ First create SetupIntent\n            var fd = new FormData();\n            fd.append('action', 'kloktion_create_setup_intent');\n            fd.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n\n            fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                method: 'POST', body: fd, credentials: 'same-origin'\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (!r.success) throw new Error(r.data.message || 'Failed to create setup');\n                return stripe.confirmCardSetup(r.data.client_secret, {\n                    payment_method: { card: cardElement }\n                });\n            })\n            .then(function(result) {\n                if (result.error) throw new Error(result.error.message);\n\n                \/\/ Save the payment method\n                var fd2 = new FormData();\n                fd2.append('action', 'kloktion_save_card');\n                fd2.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n                fd2.append('payment_method_id', result.setupIntent.payment_method);\n                fd2.append('consent', consentBox && consentBox.checked ? '1' : '0');\n                var hpField = document.getElementById('kloktion_website_url');\n                fd2.append('kloktion_website_url', hpField ? hpField.value : '');\n\n                return fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                    method: 'POST', body: fd2, credentials: 'same-origin'\n                });\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) {\n                    location.reload();\n                } else {\n                    throw new Error(r.data.message || 'Failed to save card');\n                }\n            })\n            .catch(function(err) {\n                errorsEl.textContent = err.message;\n                saveBtn.disabled = false;\n                saveBtn.textContent = <?php echo wp_json_encode( __( 'Save Card', 'kloktion-dutch-auction' ) ); ?>;\n            });\n        });\n    }\n\n    \/\/ Remove card\n    var removeBtn = document.getElementById('kloktion-remove-card');\n    if (removeBtn) {\n        removeBtn.addEventListener('click', function() {\n            if (!confirm(<?php echo wp_json_encode( __( 'Are you sure you want to remove your card?', 'kloktion-dutch-auction' ) ); ?>)) return;\n\n            var fd = new FormData();\n            fd.append('action', 'kloktion_remove_card');\n            fd.append('nonce', <?php echo wp_json_encode( wp_create_nonce( 'kloktion_card_nonce' ) ); ?>);\n\n            fetch(<?php echo wp_json_encode( admin_url( 'admin-ajax.php' ) ); ?>, {\n                method: 'POST', body: fd, credentials: 'same-origin'\n            })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) location.reload();\n            });\n        });\n    }\n    } \/\/ end startWallet\n})();\n<\/script>\n"},"result":null}
{"timestamp":"2026-05-06 07:18:33","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-06 07:18:34","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.0\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.0' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-06 07:18:43","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-06 07:18:45","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log"},"result":null}
{"timestamp":"2026-05-06 10:24:37","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"},"result":null}
{"timestamp":"2026-05-06 10:24:37","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        if (['sold', 'expired', 'stopped'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var track = btn.closest('.kloktion-one-click__track');\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            btn.style.transform = '';\n            currentDelta = 0;\n        }\n\n        function fireBuy() {\n            if (btn.disabled) return;\n\n            var hasCard = btn.getAttribute('data-has-card');\n            var walletUrl = btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                snapBack();\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    btn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = 'Slide to Buy Now';\n                });\n                return;\n            }\n\n            btn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = btn.getAttribute('data-product-id');\n            var nonce = btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = btn.closest('.kloktion-one-click') ? btn.closest('.kloktion-one-click').querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    btn.disabled = false;\n                                    if (labelEl) labelEl.textContent = 'Slide to Buy Now';\n                                    snapBack();\n                                });\n                            } else {\n                                alert(msg);\n                                btn.disabled = false;\n                                if (labelEl) labelEl.textContent = 'Slide to Buy Now';\n                                snapBack();\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        btn.disabled = false;\n                        if (labelEl) labelEl.textContent = 'Slide to Buy Now';\n                        snapBack();\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackWidth = getTrackWidth();\n            var thumbWidth = getThumbWidth();\n            var maxDelta = Math.max(0, trackWidth - thumbWidth);\n            var delta = Math.min(Math.max(e.clientX - startX, 0), maxDelta);\n            currentDelta = delta;\n            btn.style.transform = 'translateX(' + delta + 'px)';\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackWidth = getTrackWidth();\n            var thumbWidth = getThumbWidth();\n            var threshold = 0.7 * Math.max(0, trackWidth - thumbWidth);\n            if (currentDelta >= threshold) {\n                fireBuy();\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                fireBuy();\n            }\n        });\n    });\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n"},"result":null}
{"timestamp":"2026-05-06 10:24:38","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\">&#10132;<\/button>\n        <\/div>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Slide to Buy Now', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to confirm purchase', 'kloktion-dutch-auction' ),\n            esc_html__( 'Slide right to confirm purchase', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            \/\/ --- Escrow \/ destination-charge path (Contract 3) ---\n            $escrow_enabled = ! empty( $settings['escrow_enabled'] );\n\n            if ( $escrow_enabled && class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n                $payment_result = \\Kloktion\\Stripe_Payment::create_destination_payment_intent( $order, $product_id );\n\n                if ( is_wp_error( $payment_result ) ) {\n                    Checkout_Handler::release_lock( $product_id );\n                    $order->update_status( 'cancelled', $payment_result->get_error_message() );\n                    wp_send_json_error( [ 'message' => $payment_result->get_error_message() ] );\n                    return;\n                }\n\n                if ( $payment_result['status'] === 'succeeded' ) {\n                    \/\/ Payment already complete \u2014 lock will be released by sell_auction hook.\n                    wp_send_json_success( [\n                        'redirect' => $order->get_checkout_order_received_url(),\n                        'order_id' => $order->get_id(),\n                        'message'  => __( 'Payment successful!', 'kloktion-dutch-auction' ),\n                    ] );\n                    return;\n                }\n\n                if ( $payment_result['status'] === 'requires_action' ) {\n                    \/\/ Return client_secret for 3DS confirmation on the frontend.\n                    wp_send_json_success( [\n                        'requires_action'    => true,\n                        'client_secret'      => $payment_result['client_secret'],\n                        'payment_intent_id'  => $payment_result['payment_intent_id'],\n                        'order_id'           => $order->get_id(),\n                    ] );\n                    return;\n                }\n\n                \/\/ Any other status (processing, requires_payment_method, etc.)\n                \/\/ falls through to the standard checkout URL below.\n            }\n            \/\/ --- End escrow path ---\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-06 10:24:39","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-06 10:24:39","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.1\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.1' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-06 10:24:40","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/docs\/CSS_CUSTOMIZATION.md","content":"# Kloktion CSS customization guide\n\nThis guide shows how to restyle the Kloktion plugin without editing plugin files. All custom CSS goes in your active theme (or a child theme) so updates to the plugin will not overwrite your changes.\n\n## Where to put custom CSS\n\nUse one of these two places - pick whichever you prefer:\n\n1. **WordPress Customizer** - Appearance \u2192 Customize \u2192 Additional CSS. Easiest for short rules.\n2. **Child theme stylesheet** - `wp-content\/themes\/<your-child-theme>\/style.css`. Better for larger sets of rules; easier to keep in version control.\n\nAvoid editing `wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css` directly - every plugin update will replace it.\n\n## How CSS specificity works here\n\nThe plugin loads `kloktion-frontend.css` at normal stylesheet priority. Your theme stylesheet loads after, so equal-specificity rules in your theme will win. If a plugin rule still wins, increase specificity (add the parent class) or, as a last resort, add `!important`.\n\n## The classes you will most likely want to change\n\nThese are stable - they will not be renamed in minor versions.\n\n### Auction product page (the main shortcode area)\n\n- `.kloktion-auction` - outer wrapper for the whole auction widget\n- `.kloktion-header` - title + status row at the top\n- `.kloktion-price-current` - the big current price\n- `.kloktion-price-start` \/ `.kloktion-price-reserve` - start\/reserve labels\n- `.kloktion-progress` - the progress bar container\n- `.kloktion-timer` - countdown display\n- `.kloktion-one-click__track` - the slide-to-buy track (pale background, full width)\n- `.kloktion-one-click__btn` - the draggable thumb button (purple, left edge by default)\n- `.kloktion-one-click__label` - the fixed label text centered in the track\n\n### Status badges (live everywhere - product cards, archives, dashboards)\n\n- `.kloktion-badge` - base badge\n- `.kloktion-badge--active`, `--scheduled`, `--paused`, `--processing`, `--ended`, `--sold`, `--stopped`\n\n### Smart card popup (the inline Stripe form on the product page)\n\n- `.kloktion-popup` - popup overlay\n- `.kloktion-popup-box` - the card-form box\n- `.kloktion-popup__btn` - Save \/ Cancel buttons\n- `#kloktion-card-element` - the Stripe Elements mount point\n- `.kloktion-card-errors` - error message area\n\n### My Account \u2192 Wallet\n\n- `.kloktion-wallet` - outer wrapper\n- `.kloktion-wallet__card` - the saved-card display row\n- `.kloktion-wallet__brand`, `.kloktion-wallet__last4`, `.kloktion-wallet__expiry`\n- `.kloktion-wallet__change-btn`, `.kloktion-wallet__remove-btn`\n- `.kloktion-wallet__add-form` - the add-card form when no card is saved\n- `.kloktion-wallet__consent-label` - the T&C checkbox\n- `.kloktion-secure-badge` - the \"Secure Payment via Bank Fingerprint\" badge\n\n### Vendor dashboard (Dokan)\n\n- `.kloktion-vendor-auctions` - the Auctions list page wrapper\n- `.kloktion-vendor-auctions__row` - each auction row\n- `.kloktion-vendor-payouts` - the Payouts page wrapper\n\n### Notices and banners\n\n- `.kloktion-alert-banner` - top alert bar (e.g. \"card expiring soon\")\n- `.kloktion-alert-banner__close` - its close button\n- `.kloktion-global-pause-notice` - site-wide pause banner\n\n## Examples\n\n### Change the slide-to-buy thumb color\n\n```css\n.kloktion-one-click__btn {\n    background: #1a73e8;\n    color: #fff;\n}\n.kloktion-one-click__track {\n    background: rgba(26, 115, 232, 0.1);\n}\n```\n\n### Make the current price larger and bolder\n\n```css\n.kloktion-price-current {\n    font-size: 2.6rem;\n    font-weight: 800;\n    color: #c62828;\n}\n```\n\n### Restyle the active-auction badge\n\n```css\n.kloktion-badge--active {\n    background: #2e7d32;\n    color: #fff;\n    padding: 4px 10px;\n    border-radius: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n}\n```\n\n### Tighten up the wallet card display\n\n```css\n.kloktion-wallet__card {\n    background: #fafafa;\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 16px;\n}\n.kloktion-wallet__last4 {\n    font-family: ui-monospace, SFMono-Regular, monospace;\n    letter-spacing: 1px;\n}\n```\n\n### Hide the secure-badge note (if you want a more minimal look)\n\n```css\n.kloktion-wallet__note { display: none; }\n```\n\n## Working with the popup\n\nThe smart card popup uses `position: fixed` and a semi-transparent overlay. Two things to keep in mind:\n\n- The overlay (`.kloktion-popup`) gets `display: flex` when opened by JS. Don't override `display` on it.\n- The form box (`.kloktion-popup-box`) is what you usually want to restyle - width, padding, border-radius, shadow.\n\n```css\n.kloktion-popup {\n    background: rgba(0, 0, 0, 0.55);\n}\n.kloktion-popup-box {\n    max-width: 480px;\n    border-radius: 12px;\n    padding: 28px 24px;\n    box-shadow: 0 20px 60px rgba(0, 0, 0, 0.25);\n}\n```\n\n## Mobile\n\nMost components use flex layout and respond down to ~360px. If you need a tighter layout on small screens, target the same classes inside a media query.\n\n```css\n@media (max-width: 600px) {\n    .kloktion-price-current { font-size: 2rem; }\n    .kloktion-one-click__btn { width: 100%; }\n}\n```\n\n## Resetting after a bad change\n\nIf a custom rule breaks the layout, comment it out in Customizer \u2192 Additional CSS and click Publish. There is no need to clear any cache for plugin CSS - only your custom CSS is affected.\n"},"result":null}
{"timestamp":"2026-05-06 10:24:40","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/docs\/JS_CUSTOMIZATION.md","content":"# Kloktion JS customization guide\n\nThis guide explains how to add your own JavaScript on top of the plugin without modifying its files. Use a child theme or a small custom plugin to enqueue your script - that way plugin updates won't overwrite anything.\n\n## How the plugin loads its script\n\n`assets\/js\/kloktion-frontend.js` is enqueued with the handle `kloktion-frontend` on:\n\n- single auction product pages\n- pages that include the `[kloktion_auction]` shortcode\n- the My Account \u2192 Wallet page (for the Stripe card form)\n\nA `kloctionData` object is localized to that handle. From your script you can read it directly:\n\n```js\nconsole.log(kloctionData.productId, kloctionData.currentPrice, kloctionData.status);\n```\n\nAvailable fields: `apiBase`, `nonce`, `ajaxUrl`, `productId`, `pollInterval`, `status`, `currentPrice`, `startPrice`, `reservePrice`, `timeRemaining`, `progress`, `currency`.\n\n## Where to put your custom JS\n\nIn a child theme `functions.php`:\n\n```php\nadd_action( 'wp_enqueue_scripts', function () {\n    if ( ! is_singular( 'product' ) ) {\n        return;\n    }\n    wp_enqueue_script(\n        'kloktion-customizations',\n        get_stylesheet_directory_uri() . '\/js\/kloktion-customizations.js',\n        [ 'kloktion-frontend' ],   \/\/ load after the plugin's own JS\n        '1.0.0',\n        true\n    );\n}, 30 );\n```\n\nThen put your code in `wp-content\/themes\/<your-child-theme>\/js\/kloktion-customizations.js`.\n\n## Hooks you can listen for\n\nThe frontend script dispatches a small set of `CustomEvent`s on `document`. Hook into them rather than re-implementing logic.\n\n| Event name | Detail | When it fires |\n|---|---|---|\n| `kloktion:price-updated` | `{ productId, price }` | Each time the live polling updates the displayed price |\n| `kloktion:status-changed` | `{ productId, status }` | When auction status changes (active \u2192 ended, etc.) |\n| `kloktion:buy-now-clicked` | `{ productId, price }` | Buyer completed the slide gesture (before the API call) |\n| `kloktion:purchase-success` | `{ productId, orderId }` | Purchase completed and order created |\n| `kloktion:purchase-error` | `{ productId, message }` | Purchase rejected or errored |\n\nExample - log a custom analytics event when someone wins an auction:\n\n```js\ndocument.addEventListener('kloktion:purchase-success', function (e) {\n    if (window.dataLayer) {\n        window.dataLayer.push({\n            event: 'kloktion_purchase',\n            productId: e.detail.productId,\n            orderId: e.detail.orderId\n        });\n    }\n});\n```\n\nExample - show a toast when the price drops:\n\n```js\nlet lastPrice = null;\ndocument.addEventListener('kloktion:price-updated', function (e) {\n    if (lastPrice !== null && e.detail.price < lastPrice) {\n        showToast('Price dropped to ' + e.detail.price);\n    }\n    lastPrice = e.detail.price;\n});\n```\n\n## Making your own buttons\n\nIf you add a button somewhere on the page that should trigger Buy Now, dispatch the same event the plugin handles:\n\n```js\ndocument.querySelector('#my-custom-buy-now').addEventListener('click', function () {\n    document.dispatchEvent(new CustomEvent('kloktion:trigger-buy-now', {\n        detail: { productId: kloctionData.productId }\n    }));\n});\n```\n\n## Working with the smart card popup\n\nThe popup has these IDs:\n\n- `#kloktion-card-popup` - the overlay container\n- `#kloktion-popup-card-element` - the Stripe Elements mount point\n- `#kloktion-popup-save` - the Save Card button\n- `#kloktion-popup-close` - the Close (X) button\n- `#kloktion-popup-consent` - the T&C checkbox\n\nYou can listen to:\n\n```js\ndocument.addEventListener('kloktion:popup-opened', function () { ... });\ndocument.addEventListener('kloktion:popup-card-saved', function () { ... });\ndocument.addEventListener('kloktion:popup-closed',  function () { ... });\n```\n\nDon't try to call Stripe directly inside the popup - the plugin owns the Stripe Elements instance. If you need to read the saved card, use the REST endpoint (next section).\n\n## REST endpoints you can call\n\nBase URL: `kloctionData.apiBase` (resolves to `\/wp-json\/kloktion\/v1`). Send the nonce from `kloctionData.nonce` in the `X-WP-Nonce` header for any non-GET request.\n\n| Method + path | What it does |\n|---|---|\n| `GET  \/auction\/<id>` | Current price, status, time remaining for one auction |\n| `POST \/buy-now` | Trigger Buy Now (body: `product_id`) |\n| `GET  \/wallet\/card` | Brand + last4 + exp of the saved card for the current user |\n| `POST \/wallet\/setup-intent` | Create a Stripe SetupIntent for adding a card |\n| `POST \/wallet\/save-card` | Persist the card after Stripe confirms it |\n| `DELETE \/wallet\/card` | Remove the saved card |\n\nExample fetch:\n\n```js\nfetch(kloctionData.apiBase + '\/auction\/' + kloctionData.productId)\n    .then(r => r.json())\n    .then(data => console.log(data));\n```\n\n## PHP side - server hooks\n\nIf you need to react server-side (e.g. send a Slack message when an auction is approved), the plugin fires these `do_action` hooks. Hook them from a child theme or custom plugin:\n\n| Hook | Args |\n|---|---|\n| `kloktion_status_changed` | `$product_id, $old_status, $new_status` |\n| `kloktion_moderation_submitted` | `$product_id, $vendor_id` |\n| `kloktion_moderation_approved` | `$product_id, $admin_id` |\n| `kloktion_moderation_rejected` | `$product_id, $admin_id, $reason` |\n| `kloktion_escrow_created` | `$order_id, $amount` |\n| `kloktion_escrow_released` | `$order_id, $vendor_id, $amount` |\n| `kloktion_escrow_refunded` | `$order_id, $reason` |\n| `kloktion_dispute_opened_by_buyer` | `$order_id, $buyer_id, $reason` |\n| `kloktion_dispute_resolved_release` | `$order_id, $admin_id` |\n| `kloktion_dispute_resolved_refund`  | `$order_id, $admin_id` |\n| `kloktion_buyer_confirmed_receipt` | `$order_id, $buyer_id` |\n| `kloktion_vendor_onboarded` | `$vendor_id, $stripe_account_id` |\n| `kloktion_fingerprint_suspicious` | `$user_id, $fingerprint, $reason` |\n\nExample - auto-tag a vendor when their first auction is approved:\n\n```php\nadd_action( 'kloktion_moderation_approved', function ( $product_id ) {\n    $product = wc_get_product( $product_id );\n    if ( ! $product ) return;\n    $vendor_id = $product->get_meta( '_dokan_vendor_id' ) ?: get_post_field( 'post_author', $product_id );\n    update_user_meta( $vendor_id, 'kloktion_first_auction_approved', current_time( 'mysql' ) );\n}, 20 );\n```\n\n## Don't do this\n\n- Don't unenqueue `kloktion-frontend` - the auction page will stop working.\n- Don't replace the Stripe.js script with your own version. The plugin loads the version it tested against.\n- Don't poll the auction price yourself - the plugin already polls at the interval set in `kloctionData.pollInterval` and dispatches `kloktion:price-updated`. Listen instead.\n"},"result":null}
{"timestamp":"2026-05-06 10:24:41","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-06 10:24:42","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log"},"result":null}
{"timestamp":"2026-05-09 19:46:50","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-09 19:47:01","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["kloktion_settings"],"result":null}
{"timestamp":"2026-05-09 19:47:01","ip":"2a01:4f8:110:1444::2","action":"health_check","params":[],"result":null}
{"timestamp":"2026-05-09 19:47:01","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["whl_page"],"result":null}
{"timestamp":"2026-05-09 19:47:01","ip":"2a01:4f8:110:1444::2","action":"health_check","params":[],"result":"fatal: Call to undefined function get_core_updates()"}
{"timestamp":"2026-05-09 19:47:01","ip":"2a01:4f8:110:1444::2","action":"cron_list","params":[],"result":null}
{"timestamp":"2026-05-09 19:47:17","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, user_login, user_email FROM mod494_users WHERE user_login LIKE \\\"%vendor%\\\" OR user_login LIKE \\\"%emil%\\\" LIMIT 10"],"result":null}
{"timestamp":"2026-05-09 19:47:17","ip":"2a01:4f8:110:1444::2","action":"cron_list","params":[],"result":null}
{"timestamp":"2026-05-09 19:49:50","ip":"2a01:4f8:110:1444::2","action":"user_list","params":[],"result":null}
{"timestamp":"2026-05-09 19:49:50","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT user_id, meta_value FROM mod494_usermeta WHERE meta_key=\\\"dokan_enable_selling\\\" LIMIT 20"],"result":null}
{"timestamp":"2026-05-09 20:12:42","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-09 20:12:42","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["kloktion_db_version"],"result":null}
{"timestamp":"2026-05-09 20:12:58","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-05-09 20:12:58","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-05-09 20:13:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__instruction {\n    display: block;\n    margin-bottom: 8px;\n    font-size: 14px;\n    font-weight: 600;\n    color: #333;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click--active .kloktion-one-click__track {\n    background: rgba(93, 45, 163, 0.12);\n}\n\n.kloktion-one-click--active .kloktion-one-click__label {\n    color: #5d2da3;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n.kloktion-one-click__buy {\n    display: block;\n    width: 100%;\n    margin-top: 10px;\n}\n\n.kloktion-one-click__buy[hidden] {\n    display: none !important;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:18","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            btn.style.transform = '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n\n            if (active) {\n                var trackWidth = getTrackWidth();\n                var thumbWidth = getThumbWidth();\n                var maxDelta = Math.max(0, trackWidth - thumbWidth);\n                btn.style.transform = 'translateX(' + maxDelta + 'px)';\n            } else {\n                snapBack();\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            if (active) return;\n            dragging = true;\n            startX = e.clientX;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackWidth = getTrackWidth();\n            var thumbWidth = getThumbWidth();\n            var maxDelta = Math.max(0, trackWidth - thumbWidth);\n            var delta = Math.min(Math.max(e.clientX - startX, 0), maxDelta);\n            currentDelta = delta;\n            btn.style.transform = 'translateX(' + delta + 'px)';\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackWidth = getTrackWidth();\n            var thumbWidth = getThumbWidth();\n            var threshold = 0.7 * Math.max(0, trackWidth - thumbWidth);\n            if (currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        if (buyBtn) {\n            buyBtn.addEventListener('click', function(e) {\n                e.preventDefault();\n                fireBuy();\n            });\n        }\n    });\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n"},"result":null}
{"timestamp":"2026-05-09 20:13:18","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-09 20:13:19","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Auction_Engine {\n\n    private static $valid_transitions = [\n        'scheduled'      => [ 'active', 'stopped', 'pending_review' ],\n        'active'         => [ 'paused', 'sold', 'stopped', 'processing', 'expired' ],\n        'paused'         => [ 'sold', 'expired', 'stopped', 'processing' ],\n        'processing'     => [ 'sold', 'active', 'paused', 'stopped', 'pending_purchase' ],\n        'pending_purchase' => [ 'sold', 'expired', 'stopped', 'active', 'paused' ],\n        'expired'        => [ 'active', 'scheduled', 'pending_review' ],\n        'stopped'        => [ 'active', 'scheduled', 'pending_review' ],\n        'pending_review' => [ 'active', 'scheduled', 'stopped' ],\n    ];\n\n    public static function calculate_price( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $frozen = get_post_meta( $product_id, '_kloktion_pending_price', true );\n            return '' !== $frozen ? (float) $frozen : (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        if ( ! in_array( $status, [ 'active', 'processing' ], true ) ) {\n            return (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        $start_price   = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $start_time    = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration      = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return $start_price;\n        }\n\n        $elapsed = time() - $start_time;\n\n        if ( $elapsed <= 0 ) {\n            return $start_price;\n        }\n\n        if ( $elapsed >= $duration ) {\n            return $reserve_price;\n        }\n\n        $price = $start_price - ( ( $start_price - $reserve_price ) * ( $elapsed \/ $duration ) );\n        return round( max( $price, $reserve_price ), 2 );\n    }\n\n    public static function get_status( int $product_id ): string {\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        return $status ?: 'scheduled';\n    }\n\n    public static function get_time_remaining( int $product_id ): int {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            $remaining   = $pause_dur - ( time() - $pause_start );\n            return max( 0, $remaining );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $deadline = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n            return $deadline > 0 ? max( 0, $deadline - time() ) : 0;\n        }\n\n        if ( 'active' === $status || 'processing' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $remaining  = ( $start_time + $duration ) - time();\n            return max( 0, $remaining );\n        }\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            return max( 0, $start_time - time() );\n        }\n\n        return 0;\n    }\n\n    public static function get_progress( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'active' !== $status && 'processing' !== $status ) {\n            return 0.0;\n        }\n\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return 0.0;\n        }\n\n        $elapsed  = time() - $start_time;\n        $progress = $elapsed \/ $duration;\n\n        return round( max( 0.0, min( 1.0, $progress ) ), 4 );\n    }\n\n    public static function transition_status( int $product_id, string $new_status, array $meta = [] ): bool {\n        $current = self::get_status( $product_id );\n\n        \/\/ Already in target status \u2014 skip but don't update meta (prevents double-sell overwriting sold_to).\n        if ( $current === $new_status ) {\n            return false;\n        }\n\n        $allowed = self::$valid_transitions[ $current ] ?? [];\n        if ( ! in_array( $new_status, $allowed, true ) ) {\n            return false;\n        }\n\n        update_post_meta( $product_id, '_kloktion_status', $new_status );\n\n        foreach ( $meta as $key => $value ) {\n            update_post_meta( $product_id, $key, $value );\n        }\n\n        $price = self::calculate_price( $product_id );\n        Logger::log( $product_id, $new_status, $price, get_current_user_id() ?: null, $meta );\n\n        do_action( 'kloktion_auction_' . $new_status, $product_id );\n        do_action( 'kloktion_status_changed', $product_id, $new_status, $current );\n\n        \/\/ Invalidate API cache.\n        delete_transient( 'kloktion_api_' . $product_id );\n\n        return true;\n    }\n\n    public static function start_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'active', [\n            '_kloktion_start_time' => time(),\n        ] );\n    }\n\n    public static function pause_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'paused', [\n            '_kloktion_pause_start' => time(),\n        ] );\n    }\n\n    public static function expire_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'expired' );\n    }\n\n    public static function stop_auction( int $product_id, int $admin_id, string $reason ): bool {\n        return self::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => sanitize_text_field( $reason ),\n            '_kloktion_stop_by'     => $admin_id,\n        ] );\n    }\n\n    public static function sell_auction( int $product_id, int $buyer_id, float $price ): bool {\n        return self::transition_status( $product_id, 'sold', [\n            '_kloktion_sold_price' => $price,\n            '_kloktion_sold_to'    => $buyer_id,\n            '_kloktion_sold_at'    => time(),\n        ] );\n    }\n\n    public static function mark_pending_purchase( int $product_id, int $buyer_id, int $order_id, float $price ): bool {\n        $deadline = time() + ( 96 * HOUR_IN_SECONDS );\n\n        return self::transition_status( $product_id, 'pending_purchase', [\n            '_kloktion_pending_user'     => $buyer_id,\n            '_kloktion_pending_order'    => $order_id,\n            '_kloktion_pending_price'    => $price,\n            '_kloktion_payment_deadline' => $deadline,\n        ] );\n    }\n\n    public static function check_auction( int $product_id ): void {\n        $status = self::get_status( $product_id );\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            if ( $start_time > 0 && $start_time <= time() ) {\n                self::transition_status( $product_id, 'active' );\n            }\n        } elseif ( 'active' === $status ) {\n            $price      = self::calculate_price( $product_id );\n            $reserve    = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $time_up    = $duration > 0 && time() >= $start_time + $duration;\n\n            if ( $reserve > 0 && $price <= $reserve ) {\n                self::pause_auction( $product_id );\n            } elseif ( $time_up ) {\n                \/\/ Duration exceeded: expire directly (no-reserve) or expire if stuck.\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            if ( time() - $pause_start >= $pause_dur ) {\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'pending_purchase' === $status ) {\n            \/\/ The buyer owns a 96-hour payment window. Penalty handling is done by\n            \/\/ check_unpaid_wins(); keep the auction unavailable until admin\/vendor action.\n            return;\n        } elseif ( 'processing' === $status ) {\n            $since    = (int) get_post_meta( $product_id, '_kloktion_processing_since', true );\n            $settings = get_option( 'kloktion_settings', [] );\n            $timeout  = (int) ( $settings['processing_timeout'] ?? 300 );\n            if ( time() - $since >= $timeout ) {\n                $was_paused = self::calculate_price( $product_id ) <= (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n                $restore    = $was_paused ? 'paused' : 'active';\n\n                if ( 'paused' === $restore ) {\n                    \/\/ reset pause_start for expiry timer\n                    self::transition_status( $product_id, 'paused', [\n                        '_kloktion_pause_start' => time(),\n                    ] );\n                } else {\n                    self::transition_status( $product_id, 'active' );\n                }\n\n                delete_post_meta( $product_id, '_kloktion_processing_user' );\n                delete_post_meta( $product_id, '_kloktion_processing_since' );\n            }\n        }\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:19","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-card-manager.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Card_Manager {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_save_card', [ self::class, 'handle_save_card' ] );\n        add_action( 'wp_ajax_kloktion_remove_card', [ self::class, 'handle_remove_card' ] );\n        add_action( 'wp_ajax_kloktion_create_setup_intent', [ self::class, 'create_setup_intent' ] );\n        add_action( 'wp_body_open', [ self::class, 'render_alert_banner' ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Reusable (REST + AJAX): SetupIntent\n    \/\/ -------------------------------------------------------------------------\n\n    \/**\n     * Create a SetupIntent for a given user. Returns client_secret string or WP_Error.\n     * Reusable from both AJAX and REST contexts.\n     *\/\n    public static function create_setup_intent_for_user( int $user_id ) {\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'kloktion_stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ), [ 'status' => 503 ] );\n        }\n        $customer_id = self::get_or_create_stripe_customer( $user_id );\n        if ( is_wp_error( $customer_id ) ) {\n            return $customer_id;\n        }\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/setup_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'customer' => $customer_id,\n                    'usage'    => 'off_session',\n                ],\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! empty( $body['error'] ) ) {\n            return new \\WP_Error(\n                'kloktion_stripe_error',\n                $body['error']['message'] ?? __( 'Stripe error.', 'kloktion-dutch-auction' ),\n                [ 'status' => 500 ]\n            );\n        }\n        return $body['client_secret'] ?? '';\n    }\n\n    \/**\n     * Save a payment method to a user (retrieve from Stripe, attach to customer, save meta).\n     * Extracted from handle_save_card for reuse via REST.\n     *\/\n    public static function save_payment_method( int $user_id, string $payment_method_id ) {\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'kloktion_stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ), [ 'status' => 503 ] );\n        }\n        $customer_id = self::get_or_create_stripe_customer( $user_id );\n        if ( is_wp_error( $customer_id ) ) {\n            return $customer_id;\n        }\n        \/\/ Retrieve PM details.\n        $response = wp_remote_get(\n            'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ),\n            [ 'headers' => [ 'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ) ] ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n        $pm = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! empty( $pm['error'] ) ) {\n            return new \\WP_Error( 'kloktion_stripe_error', $pm['error']['message'] ?? __( 'Could not retrieve card details.', 'kloktion-dutch-auction' ), [ 'status' => 500 ] );\n        }\n        \/\/ Attach to customer (idempotent if already attached).\n        if ( empty( $pm['customer'] ) || $pm['customer'] !== $customer_id ) {\n            $attach_response = wp_remote_post(\n                'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ) . '\/attach',\n                [\n                    'headers' => [ 'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ) ],\n                    'body'    => [ 'customer' => $customer_id ],\n                ]\n            );\n            if ( is_wp_error( $attach_response ) ) {\n                return $attach_response;\n            }\n        }\n        \/\/ Save meta (use same keys as handle_save_card for consistency).\n        $card = $pm['card'] ?? [];\n        update_user_meta( $user_id, '_kloktion_card_payment_method', $payment_method_id );\n        update_user_meta( $user_id, '_kloktion_card_last4', sanitize_text_field( $card['last4'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_brand', sanitize_text_field( $card['brand'] ?? '' ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_month', (int) ( $card['exp_month'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_exp_year', (int) ( $card['exp_year'] ?? 0 ) );\n        update_user_meta( $user_id, '_kloktion_card_saved_at', time() );\n        \/\/ Record consent if not already stored.\n        if ( ! self::has_consent( $user_id ) ) {\n            update_user_meta( $user_id, '_kloktion_penalty_consent', time() );\n        }\n        return true;\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: SetupIntent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function create_setup_intent(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $client_secret = self::create_setup_intent_for_user( $user_id );\n        if ( is_wp_error( $client_secret ) ) {\n            wp_send_json_error( [ 'message' => $client_secret->get_error_message() ], 500 );\n        }\n\n        wp_send_json_success( [ 'client_secret' => $client_secret ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Save card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_save_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        \/\/ Honeypot check - reject bots that fill the decoy field.\n        $hp_value = isset( $_POST['kloktion_website_url'] ) ? (string) $_POST['kloktion_website_url'] : '';\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/save-card value=%s', $ip, $ua, $hp_value ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = sanitize_text_field( $_POST['payment_method_id'] ?? '' );\n        if ( empty( $payment_method_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Missing payment method.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n\n        $result = self::save_payment_method( $user_id, $payment_method_id );\n        if ( is_wp_error( $result ) ) {\n            wp_send_json_error( [ 'message' => $result->get_error_message() ], 500 );\n        }\n\n        \/\/ Persist explicit consent (AJAX flow only \u2014 REST flow auto-records on save).\n        $consent = sanitize_text_field( $_POST['consent'] ?? '' );\n        if ( '1' === $consent && ! self::has_consent( $user_id ) ) {\n            self::record_consent( $user_id );\n        }\n\n        wp_send_json_success( [\n            'message' => __( 'Card saved successfully.', 'kloktion-dutch-auction' ),\n            'card'    => self::get_card_info( $user_id ),\n        ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ AJAX: Remove card\n    \/\/ -------------------------------------------------------------------------\n\n    public static function handle_remove_card(): void {\n        check_ajax_referer( 'kloktion_card_nonce', 'nonce' );\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            wp_send_json_error( [ 'message' => __( 'You must be logged in.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n\n        if ( ! empty( $payment_method_id ) ) {\n            $secret_key = self::get_stripe_secret_key();\n\n            if ( ! empty( $secret_key ) ) {\n                wp_remote_post(\n                    'https:\/\/api.stripe.com\/v1\/payment_methods\/' . rawurlencode( $payment_method_id ) . '\/detach',\n                    [\n                        'headers' => [\n                            'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                        ],\n                    ]\n                );\n            }\n        }\n\n        delete_user_meta( $user_id, '_kloktion_card_payment_method' );\n        delete_user_meta( $user_id, '_kloktion_card_last4' );\n        delete_user_meta( $user_id, '_kloktion_card_brand' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_month' );\n        delete_user_meta( $user_id, '_kloktion_card_exp_year' );\n        delete_user_meta( $user_id, '_kloktion_card_saved_at' );\n        delete_user_meta( $user_id, '_kloktion_penalty_consent' );\n\n        wp_send_json_success( [ 'message' => __( 'Card removed.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Card validation helpers\n    \/\/ -------------------------------------------------------------------------\n\n    public static function has_valid_card( int $user_id ): bool {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return false;\n        }\n\n        $exp_month = (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true );\n        $exp_year  = (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true );\n\n        $now_month = (int) date( 'n' );\n        $now_year  = (int) date( 'Y' );\n\n        return ( $exp_year > $now_year ) || ( $exp_year === $now_year && $exp_month >= $now_month );\n    }\n\n    public static function get_card_info( int $user_id ): ?array {\n        $pm = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $pm ) ) {\n            return null;\n        }\n\n        return [\n            'last4'     => get_user_meta( $user_id, '_kloktion_card_last4', true ),\n            'brand'     => get_user_meta( $user_id, '_kloktion_card_brand', true ),\n            'exp_month' => (int) get_user_meta( $user_id, '_kloktion_card_exp_month', true ),\n            'exp_year'  => (int) get_user_meta( $user_id, '_kloktion_card_exp_year', true ),\n        ];\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Consent\n    \/\/ -------------------------------------------------------------------------\n\n    public static function record_consent( int $user_id ): void {\n        global $wpdb;\n\n        $wpdb->insert(\n            $wpdb->prefix . 'kloktion_card_consents',\n            [\n                'user_id'      => $user_id,\n                'consent_type' => 'penalty_terms',\n                'ip_address'   => self::get_client_ip(),\n                'accepted_at'  => current_time( 'mysql' ),\n            ],\n            [ '%d', '%s', '%s', '%s' ]\n        );\n\n        update_user_meta( $user_id, '_kloktion_penalty_consent', time() );\n    }\n\n    public static function has_consent( int $user_id ): bool {\n        return (bool) get_user_meta( $user_id, '_kloktion_penalty_consent', true );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Penalty charge\n    \/\/ -------------------------------------------------------------------------\n\n    public static function charge_penalty( int $user_id, int $order_id, float $amount ): bool {\n        $payment_method_id = get_user_meta( $user_id, '_kloktion_card_payment_method', true );\n        if ( empty( $payment_method_id ) ) {\n            return false;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return false;\n        }\n\n        $currency = strtolower( get_woocommerce_currency() );\n        $amount_cents = (int) round( $amount * 100 );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/payment_intents',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'amount'               => $amount_cents,\n                    'currency'             => $currency,\n                    'payment_method'       => $payment_method_id,\n                    'customer'             => self::get_or_create_stripe_customer( $user_id ),\n                    'off_session'          => 'true',\n                    'confirm'              => 'true',\n                    'description'          => sprintf(\n                        'Kloktion penalty \u2014 Order #%d',\n                        $order_id\n                    ),\n                    'metadata[order_id]'   => $order_id,\n                    'metadata[user_id]'    => $user_id,\n                    'metadata[type]'       => 'penalty',\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $response->get_error_message(),\n            ] );\n            return false;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            Logger::log( 0, 'penalty_failed', $amount, $user_id, [\n                'order_id' => $order_id,\n                'error'    => $body['error']['message'] ?? 'Unknown Stripe error',\n            ] );\n            return false;\n        }\n\n        if ( ( $body['status'] ?? '' ) === 'succeeded' ) {\n            update_post_meta( $order_id, '_kloktion_penalty_intent_' . time(), $body['id'] ?? '' );\n            return true;\n        }\n\n        return false;\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Alert banner\n    \/\/ -------------------------------------------------------------------------\n\n    public static function render_alert_banner(): void {\n        if ( is_admin() ) {\n            return;\n        }\n\n        if ( function_exists( 'dokan_is_seller_dashboard' ) && dokan_is_seller_dashboard() ) {\n            return;\n        }\n\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        if ( current_user_can( 'manage_woocommerce' ) || current_user_can( 'manage_options' ) ) {\n            return;\n        }\n\n        if ( function_exists( 'dokan_is_user_seller' ) && dokan_is_user_seller( $user_id ) ) {\n            return;\n        }\n\n        if ( self::has_valid_card( $user_id ) ) {\n            return;\n        }\n\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-alert-banner\">%s <a href=\"%s\">%s<\/a><\/div>',\n            esc_html__( 'Unverified account: Register a card to participate in auctions.', 'kloktion-dutch-auction' ),\n            esc_url( $wallet_url ),\n            esc_html__( 'My Wallet', 'kloktion-dutch-auction' )\n        );\n    }\n\n    \/\/ -------------------------------------------------------------------------\n    \/\/ Private helpers\n    \/\/ -------------------------------------------------------------------------\n\n    private static function get_stripe_secret_key(): string {\n        $stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n        $test_mode       = ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes';\n\n        return $test_mode\n            ? ( $stripe_settings['test_secret_key'] ?? '' )\n            : ( $stripe_settings['secret_key'] ?? '' );\n    }\n\n    private static function get_or_create_stripe_customer( int $user_id ): string|\\WP_Error {\n        $customer_id = get_user_meta( $user_id, '_stripe_customer_id', true );\n\n        if ( ! empty( $customer_id ) ) {\n            return $customer_id;\n        }\n\n        $secret_key = self::get_stripe_secret_key();\n        if ( empty( $secret_key ) ) {\n            return new \\WP_Error( 'stripe_not_configured', __( 'Stripe is not configured.', 'kloktion-dutch-auction' ) );\n        }\n\n        $user = get_userdata( $user_id );\n\n        $response = wp_remote_post(\n            'https:\/\/api.stripe.com\/v1\/customers',\n            [\n                'headers' => [\n                    'Authorization' => 'Basic ' . base64_encode( $secret_key . ':' ),\n                ],\n                'body' => [\n                    'email'       => $user->user_email ?? '',\n                    'name'        => trim( ( $user->first_name ?? '' ) . ' ' . ( $user->last_name ?? '' ) ),\n                    'description' => 'Kloktion user ID ' . $user_id,\n                ],\n            ]\n        );\n\n        if ( is_wp_error( $response ) ) {\n            return $response;\n        }\n\n        $body = json_decode( wp_remote_retrieve_body( $response ), true );\n\n        if ( ! empty( $body['error'] ) ) {\n            return new \\WP_Error( 'stripe_error', $body['error']['message'] ?? __( 'Stripe customer creation failed.', 'kloktion-dutch-auction' ) );\n        }\n\n        $customer_id = $body['id'] ?? '';\n\n        if ( ! empty( $customer_id ) ) {\n            update_user_meta( $user_id, '_stripe_customer_id', $customer_id );\n        }\n\n        return $customer_id;\n    }\n\n    private static function get_client_ip(): string {\n        if ( class_exists( '\\WC_Geolocation' ) ) {\n            return \\WC_Geolocation::get_ip_address();\n        }\n\n        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:20","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Checkout_Handler {\n\n    public static function init(): void {\n        add_action( 'woocommerce_checkout_process', [ __CLASS__, 'validate_checkout' ] );\n        add_action( 'woocommerce_after_checkout_validation', [ __CLASS__, 'release_locks_on_error' ], 10, 2 );\n        add_action( 'woocommerce_checkout_create_order_line_item', [ __CLASS__, 'add_order_item_meta' ], 10, 4 );\n        add_action( 'woocommerce_payment_complete', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_failed', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_cancelled', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_completed', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_processing', [ __CLASS__, 'handle_payment_complete' ] );\n\n        \/\/ prevent double-sell on order-pay\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'validate_order_pay' ] );\n\n        \/\/ Show payment method on thank-you page for auction orders.\n        add_action( 'woocommerce_order_details_after_order_table', [ __CLASS__, 'show_payment_method' ] );\n\n        \/\/ Show auction notice on order-pay page.\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'show_order_pay_notice' ], 5 );\n    }\n\n    public static function acquire_lock( int $product_id, int $user_id ): bool {\n        global $wpdb;\n\n        $affected = $wpdb->query(\n            $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta}\n                 SET meta_value = 'processing'\n                 WHERE post_id = %d\n                   AND meta_key = '_kloktion_status'\n                   AND meta_value IN ('active', 'paused')\",\n                $product_id\n            )\n        );\n\n        if ( 1 === $affected ) {\n            \/\/ Flush WP object cache after direct SQL so get_post_meta reads fresh data.\n            wp_cache_delete( $product_id, 'post_meta' );\n\n            update_post_meta( $product_id, '_kloktion_processing_user', $user_id );\n            update_post_meta( $product_id, '_kloktion_processing_since', time() );\n\n            Logger::log( $product_id, 'lock_acquired', Auction_Engine::calculate_price( $product_id ), $user_id );\n            delete_transient( 'kloktion_api_' . $product_id );\n\n            return true;\n        }\n\n        return false;\n    }\n\n    public static function release_lock( int $product_id ): void {\n        $reserve = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $price   = Auction_Engine::calculate_price( $product_id );\n\n        \/\/ Determine what status to restore.\n        $restore = ( $price <= $reserve ) ? 'paused' : 'active';\n\n        \/\/ Direct update to bypass transition validation (processing \u2192 active\/paused).\n        update_post_meta( $product_id, '_kloktion_status', $restore );\n\n        if ( 'paused' === $restore && ! get_post_meta( $product_id, '_kloktion_pause_start', true ) ) {\n            update_post_meta( $product_id, '_kloktion_pause_start', time() );\n        }\n\n        delete_post_meta( $product_id, '_kloktion_processing_user' );\n        delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n        Logger::log( $product_id, 'lock_released', $price );\n        delete_transient( 'kloktion_api_' . $product_id );\n    }\n\n    \/\/ acquire locks; release all on failure\n    public static function validate_checkout(): void {\n        if ( ! WC()->cart ) {\n            return;\n        }\n\n        $user_id      = get_current_user_id();\n        $locked_ids   = [];\n\n        foreach ( WC()->cart->get_cart() as $key => $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n\n            if ( ! self::acquire_lock( $product_id, $user_id ?: 0 ) ) {\n                foreach ( $locked_ids as $locked_id ) {\n                    self::release_lock( $locked_id );\n                }\n\n                throw new \\Exception(\n                    sprintf(\n                        __( 'Sorry, the auction for \"%s\" has already been purchased by another buyer.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n            }\n\n            $locked_ids[] = $product_id;\n        }\n    }\n\n    \/**\n     * Release any auction locks if WC checkout validation produced errors.\n     * Prevents orphaned locks when a required field is missing.\n     *\/\n    public static function release_locks_on_error( array $data, \\WP_Error $errors ): void {\n        if ( ! $errors->has_errors() || ! WC()->cart ) {\n            return;\n        }\n\n        foreach ( WC()->cart->get_cart() as $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n            $status     = Auction_Engine::get_status( $product_id );\n\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === get_current_user_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function validate_order_pay(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n            $current_user    = get_current_user_id();\n\n            if ( in_array( $status, [ 'sold', 'expired', 'stopped' ], true ) ) {\n                $order->update_status( 'cancelled', __( 'Auction is no longer available.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'This auction has already ended. Your order has been cancelled.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $deadline      = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n\n                if ( $pending_order === $order_id && $pending_user === $current_user && ( ! $deadline || $deadline >= time() ) ) {\n                    continue;\n                }\n\n                wc_add_notice( __( 'This auction payment window is no longer available.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            \/\/ Block payment unless this user currently holds the processing lock.\n            \/\/ Covers: lock expired and auction returned to active\/paused, or another user holds it.\n            if ( 'processing' !== $status || $processing_user !== $current_user ) {\n                $order->update_status( 'cancelled', __( 'Your price lock has expired. Order cancelled.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'Your price lock has expired. Please add the item to your cart again.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n        }\n    }\n\n    public static function add_order_item_meta( $item, $cart_item_key, $values, $order ): void {\n        if ( ! isset( $values['kloktion_frozen_price'] ) ) {\n            return;\n        }\n\n        $start_price = (float) get_post_meta( $values['kloktion_product_id'], '_kloktion_start_price', true );\n        $frozen      = (float) $values['kloktion_frozen_price'];\n        $savings     = $start_price - $frozen;\n        $pct         = $start_price > 0 ? round( ( $savings \/ $start_price ) * 100, 1 ) : 0;\n\n        $item->add_meta_data( '_kloktion_frozen_price', $frozen );\n        $item->add_meta_data( '_kloktion_start_price', $start_price );\n        $item->add_meta_data( '_kloktion_savings', $savings );\n        $item->add_meta_data( '_kloktion_savings_percent', $pct );\n        $item->add_meta_data( '_kloktion_product_id', (int) $values['kloktion_product_id'] );\n    }\n\n    public static function handle_payment_complete( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        \/\/ already processed\n        if ( $order->get_meta( '_kloktion_sale_finalized' ) ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            if ( ! in_array( $status, [ 'processing', 'pending_purchase', 'active', 'paused' ], true ) ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" is no longer available (status: %s). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id ),\n                        $status\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', null, $order->get_customer_id(), [\n                    'order_id'       => $order_id,\n                    'auction_status' => $status,\n                ] );\n                return;\n            }\n\n            if ( 'processing' === $status ) {\n                $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                $buyer_id        = $order->get_customer_id();\n                if ( $processing_user && $processing_user !== $buyer_id ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'Another buyer holds the lock for this auction. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $buyer_id      = (int) $order->get_customer_id();\n\n                if ( ( $pending_user && $pending_user !== $buyer_id ) || ( $pending_order && $pending_order !== $order_id ) ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'This auction is reserved for another pending purchase. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            $frozen = (float) $item->get_meta( '_kloktion_frozen_price' );\n            $start  = (float) $item->get_meta( '_kloktion_start_price' );\n            $pct    = (float) $item->get_meta( '_kloktion_savings_percent' );\n\n            $buyer_id = $order->get_customer_id();\n            $sold = Auction_Engine::sell_auction( $product_id, $buyer_id, $frozen );\n\n            if ( ! $sold ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" could not be finalized (already sold or ended). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', $frozen, $buyer_id, [\n                    'order_id' => $order_id,\n                    'reason'   => 'sell_auction_failed',\n                ] );\n                return;\n            }\n\n            $order->add_order_note(\n                sprintf(\n                    __( 'Dutch Auction purchase: %s at %s (started at %s, savings %s%%)', 'kloktion-dutch-auction' ),\n                    get_the_title( $product_id ),\n                    wc_price( $frozen ),\n                    wc_price( $start ),\n                    $pct\n                )\n            );\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n            delete_post_meta( $product_id, '_kloktion_pending_user' );\n            delete_post_meta( $product_id, '_kloktion_pending_order' );\n            delete_post_meta( $product_id, '_kloktion_pending_price' );\n            delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n        }\n\n        $order->update_meta_data( '_kloktion_sale_finalized', time() );\n        $order->save();\n    }\n\n    public static function handle_payment_failed( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === (int) $order->get_customer_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function show_order_pay_notice(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            if ( $item->get_meta( '_kloktion_product_id' ) ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( $has_auction ) {\n            printf(\n                '<div class=\"woocommerce-info kloktion-pay-notice\">%s<\/div>',\n                esc_html__( 'This lot is reserved for you. Please complete payment within 96 hours to avoid a penalty.', 'kloktion-dutch-auction' )\n            );\n        }\n    }\n\n    public static function show_payment_method( $order ): void {\n        if ( ! $order instanceof \\WC_Order ) {\n            return;\n        }\n\n        \/\/ Only show for orders containing auction products.\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            $product = $item->get_product();\n            if ( $product instanceof Product_Type ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( ! $has_auction ) {\n            return;\n        }\n\n        $method = $order->get_payment_method_title();\n        if ( $method ) {\n            printf(\n                '<p class=\"kloktion-payment-method\"><strong>%s<\/strong> %s<\/p>',\n                esc_html__( 'Payment method:', 'kloktion-dutch-auction' ),\n                esc_html( $method )\n            );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:21","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-cron.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Cron {\n\n    public static function auto_release_expired_escrow(): void {\n        global $wpdb;\n        $table          = $wpdb->prefix . 'kloktion_escrow';\n        $disputes_table = $wpdb->prefix . 'kloktion_disputes';\n\n        \/\/ Find escrow rows past deadline, still held, no open dispute.\n        $expired = $wpdb->get_results(\n            \"SELECT e.id, e.order_id, e.vendor_id\n             FROM {$table} e\n             WHERE e.status = 'held'\n               AND e.release_deadline <= NOW()\n               AND NOT EXISTS (\n                   SELECT 1 FROM {$disputes_table} d\n                   WHERE d.escrow_id = e.id AND d.status = 'open'\n               )\n             LIMIT 100\"\n        );\n\n        if ( empty( $expired ) ) {\n            return;\n        }\n\n        foreach ( $expired as $row ) {\n            if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n                \\Kloktion\\Stripe_Payment::release_escrow( (int) $row->id, 'auto' );\n            } else {\n                \/\/ Fallback: direct DB update when Stripe class unavailable.\n                $wpdb->update(\n                    $table,\n                    [\n                        'status'      => 'released',\n                        'released_at' => current_time( 'mysql' ),\n                        'updated_at'  => current_time( 'mysql' ),\n                    ],\n                    [ 'id' => (int) $row->id ]\n                );\n                \/\/ Ensure downstream listeners still fire even without Stripe class.\n                do_action( 'kloktion_escrow_released', (int) $row->id, 'auto' );\n            }\n        }\n    }\n\n    public static function check_unpaid_wins(): void {\n        $args = [\n            'status'     => 'pending',\n            'date_created' => '<' . ( time() - 96 * HOUR_IN_SECONDS ),\n            'limit'      => 50,\n            'meta_key'   => '_kloktion_one_click',\n            'meta_value' => 'yes',\n        ];\n\n        $orders = wc_get_orders( $args );\n\n        foreach ( $orders as $order ) {\n            $user_id = $order->get_customer_id();\n            if ( ! $user_id ) {\n                continue;\n            }\n\n            \/\/ Skip if a penalty was already charged within the last week.\n            $last_penalty = get_post_meta( $order->get_id(), '_kloktion_last_penalty', true );\n            if ( $last_penalty && ( time() - (int) $last_penalty ) < WEEK_IN_SECONDS ) {\n                continue;\n            }\n\n            foreach ( $order->get_items() as $item ) {\n                $frozen_price = (float) $item->get_meta( '_kloktion_frozen_price' );\n                if ( $frozen_price <= 0 ) {\n                    continue;\n                }\n\n                $penalty_amount = round( $frozen_price * 0.05, 2 );\n                $result         = Card_Manager::charge_penalty( $user_id, $order->get_id(), $penalty_amount );\n\n                if ( $result ) {\n                    update_post_meta( $order->get_id(), '_kloktion_last_penalty', time() );\n\n                    $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n                    Logger::log(\n                        $product_id,\n                        'penalty_charged',\n                        $penalty_amount,\n                        $user_id,\n                        [ 'order_id' => $order->get_id() ]\n                    );\n\n                    self::notify_buyer_penalty( $order, $penalty_amount );\n                }\n            }\n        }\n    }\n\n    private static function notify_buyer_penalty( \\WC_Order $order, float $penalty_amount ): void {\n        $user_id = $order->get_customer_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        if ( ! $user ) {\n            return;\n        }\n\n        $subject = sprintf(\n            __( 'Penalty charge applied \u2014 Order #%d', 'kloktion-dutch-auction' ),\n            $order->get_id()\n        );\n\n        $message = sprintf(\n            __( \"Hello %s,\\n\\nA penalty of %s has been charged to your saved card for Order #%d, which remains unpaid.\\n\\nPlease complete your payment as soon as possible to avoid further charges.\\n\\nOrder details: %s\\n\\nKloktion Team\", 'kloktion-dutch-auction' ),\n            esc_html( $user->display_name ),\n            wc_price( $penalty_amount ),\n            $order->get_id(),\n            $order->get_view_order_url()\n        );\n\n        wp_mail(\n            $user->user_email,\n            $subject,\n            wp_strip_all_tags( $message ),\n            [ 'Content-Type: text\/plain; charset=UTF-8' ]\n        );\n    }\n\n    public static function check_auctions(): void {\n        global $wpdb;\n\n        $statuses = [ 'scheduled', 'active', 'paused', 'processing', 'pending_purchase' ];\n        $batch    = 100;\n        $offset   = 0;\n\n        do {\n            $product_ids = $wpdb->get_col(\n                $wpdb->prepare(\n                    \"SELECT DISTINCT pm.post_id\n                     FROM {$wpdb->postmeta} pm\n                     INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                     WHERE pm.meta_key = '_kloktion_status'\n                       AND pm.meta_value IN (\" . implode( ',', array_fill( 0, count( $statuses ), '%s' ) ) . \")\n                       AND p.post_status = 'publish'\n                     ORDER BY p.ID ASC\n                     LIMIT %d OFFSET %d\",\n                    ...array_merge( $statuses, [ $batch, $offset ] )\n                )\n            );\n\n            foreach ( $product_ids as $product_id ) {\n                Auction_Engine::check_auction( (int) $product_id );\n            }\n\n            $offset += $batch;\n        } while ( count( $product_ids ) === $batch );\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:21","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Dokan {\n\n    public static function init(): void {\n        if ( ! class_exists( 'WeDevs_Dokan' ) ) {\n            return;\n        }\n\n        add_action( 'dokan_new_product_after_product_tags', [ __CLASS__, 'vendor_product_fields' ] );\n        add_action( 'dokan_product_edit_after_product_tags', [ __CLASS__, 'vendor_product_fields' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'save_post_product', [ __CLASS__, 'force_auction_product_type' ], 999, 1 );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_dashboard_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'load_dashboard_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_payouts_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_payouts_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'render_payouts_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_exit_dashboard_nav' ], 99 );\n\n        \/\/ Dokan blocks vendor's own products; allow dutch_auction\n        add_filter( 'woocommerce_is_purchasable', [ __CLASS__, 'allow_dutch_auction_purchase' ], 20, 2 );\n\n        \/\/ Dokan Lite hardcodes product_type='simple' in Products listing; include dutch_auction.\n        add_filter( 'dokan_product_types', [ __CLASS__, 'register_product_type' ] );\n        add_filter( 'dokan_product_listing_arg', [ __CLASS__, 'include_auctions_in_product_listing' ] );\n        add_action( 'init', [ __CLASS__, 'ensure_current_seller_enabled' ], 20 );\n    }\n\n    public static function vendor_product_fields( $post_id = null, $product = null ): void {\n        $product_id = 0;\n        if ( $product instanceof \\WC_Product ) {\n            $product_id = $product->get_id();\n        } elseif ( is_numeric( $post_id ) ) {\n            $product_id = (int) $post_id;\n        }\n\n        $start_price   = $product_id ? get_post_meta( $product_id, '_kloktion_start_price', true ) : '';\n        $reserve_price = $product_id ? get_post_meta( $product_id, '_kloktion_reserve_price', true ) : '';\n        $duration      = $product_id ? get_post_meta( $product_id, '_kloktion_duration', true ) : '';\n        $status        = $product_id ? Auction_Engine::get_status( $product_id ) : '';\n        $terms         = $product_id ? wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] ) : [];\n        $is_auction    = ! $product_id || in_array( 'dutch_auction', $terms, true );\n\n        \/\/ Lock auction fields once the auction has started (any non-empty, non-draft status).\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        $is_locked       = $product_id && in_array( $status, $locked_statuses, true );\n\n        \/\/ Render pending_review notice before the template.\n        if ( 'pending_review' === $status ) {\n            echo '<div style=\"background:#fff8e1;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#7a5800;\">'\n                . '&#9203; ' . esc_html__( 'Your update is pending admin approval. You\\'ll be notified by email once reviewed.', 'kloktion-dutch-auction' )\n                . '<\/div>';\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/product-fields.php';\n    }\n\n    \/**\n     * Intercept vendor product updates for moderation before save_vendor_product runs.\n     * Runs at priority 5, before save_vendor_product at priority 10.\n     *\n     * If moderation is enabled and the auction is in 'stopped' or 'pending_review' state,\n     * capture submitted data, queue it for review, set status to pending_review, and\n     * unhook save_vendor_product so it cannot overwrite the fields.\n     *\/\n    public static function intercept_vendor_update_for_moderation( $product_id, $data ): void {\n        global $wpdb;\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] intercept_vendor_update_for_moderation: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( empty( $settings['moderation_enabled'] ) ) {\n            return;\n        }\n\n        $current_status = get_post_meta( $product_id, '_kloktion_status', true );\n\n        \/\/ Allow new products (empty _kloktion_status) only if this is a Dutch Auction.\n        \/\/ For existing products, only intercept when in 'stopped' or 'pending_review' state.\n        $is_new_product = ( '' === $current_status || false === $current_status );\n        if ( $is_new_product ) {\n            \/\/ Detect if this is a Dutch Auction submission before deciding to intercept.\n            $is_auction_signal = ! empty( $_POST['_kloktion_is_auction'] )\n                || ! empty( $data['_kloktion_is_auction'] )\n                || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n                || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n                || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n            if ( ! $is_auction_signal ) {\n                return; \/\/ Non-auction new product \u2014 skip.\n            }\n        } elseif ( ! in_array( $current_status, [ 'stopped', 'pending_review' ], true ) ) {\n            return; \/\/ Existing product not in a moderation-eligible state.\n        }\n\n        \/\/ Capture only our plugin fields from $data.\n        $kloktion_data = [];\n        foreach ( (array) $data as $key => $value ) {\n            if ( 0 === strpos( $key, '_kloktion_' ) ) {\n                $kloktion_data[ $key ] = $value;\n            }\n        }\n\n        \/\/ Upsert: if a pending row already exists for this product, reset it rather than duplicating.\n        $wpdb->query( $wpdb->prepare(\n            \"INSERT INTO {$wpdb->prefix}kloktion_moderation_queue\n             (product_id, vendor_id, submitted_data, submitted_at, status)\n             VALUES (%d, %d, %s, %s, 'pending')\n             ON DUPLICATE KEY UPDATE\n                vendor_id        = VALUES(vendor_id),\n                submitted_data   = VALUES(submitted_data),\n                submitted_at     = VALUES(submitted_at),\n                status           = 'pending',\n                reviewed_by      = NULL,\n                reviewed_at      = NULL,\n                rejection_reason = NULL\",\n            (int) $product_id,\n            (int) get_current_user_id(),\n            wp_json_encode( $kloktion_data ),\n            current_time( 'mysql' )\n        ) );\n\n        do_action( 'kloktion_moderation_submitted', $product_id, $data );\n\n        \/\/ CRITICAL: Persist auction meta + term BEFORE unhooking save_vendor_product.\n        \/\/ Otherwise Dokan's own save resets product_type to 'simple' and auction data is lost.\n        \/\/ Robust detection: accept checkbox, price field, or product_type signal.\n        $intercept_is_auction = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] )\n            || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n            || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n            || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n        if ( $intercept_is_auction ) {\n            \/\/ Force dutch_auction product type term.\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n            \/\/ Persist auction meta from $data (or $_POST fallback).\n            $meta_map = [\n                '_kloktion_is_auction',\n                '_kloktion_start_price',\n                '_kloktion_reserve_price',\n                '_kloktion_duration',\n                '_kloktion_start_date',\n                '_kloktion_start_time',\n                '_kloktion_start_timestamp',\n                '_kloktion_decay_curve',\n            ];\n            foreach ( $meta_map as $key ) {\n                $value = null;\n                if ( isset( $data[ $key ] ) ) {\n                    $value = $data[ $key ];\n                } elseif ( isset( $_POST[ $key ] ) ) {\n                    $value = wp_unslash( $_POST[ $key ] );\n                }\n                if ( $value !== null && $value !== '' ) {\n                    if ( in_array( $key, [ '_kloktion_start_price', '_kloktion_reserve_price' ], true ) ) {\n                        update_post_meta( $product_id, $key, (float) $value );\n                    } elseif ( in_array( $key, [ '_kloktion_duration', '_kloktion_start_timestamp' ], true ) ) {\n                        update_post_meta( $product_id, $key, absint( $value ) );\n                    } else {\n                        update_post_meta( $product_id, $key, sanitize_text_field( $value ) );\n                    }\n                }\n            }\n\n            \/\/ Ensure _kloktion_is_auction flag persists (used by force_auction_product_type detection).\n            update_post_meta( $product_id, '_kloktion_is_auction', '1' );\n\n            \/\/ Compute end_time if we have start_time + duration.\n            $start_ts = (int) get_post_meta( $product_id, '_kloktion_start_timestamp', true );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $start_ts > 0 && $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_ts + $duration );\n            }\n        }\n\n        \/\/ Mark as pending_review AFTER meta is saved.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Unhook save_vendor_product so it doesn't overwrite the pending_review state.\n        remove_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10 );\n        remove_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10 );\n    }\n\n    public static function save_vendor_product( $product_id, $data ): void {\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] save_vendor_product: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        \/\/ Robust auction detection: accept any of these signals\n        \/\/ (Dokan may strip or rename fields; presence of price\/type fields is enough).\n        $is_auction_posted = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] );\n\n        $has_auction_price = isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price']\n            || isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'];\n\n        \/\/ Check product_type field in POST (Dokan sends this as 'product_type' or inside $data)\n        $posted_type = $_POST['product_type'] ?? ( $data['product_type'] ?? '' );\n        $type_is_auction = ( 'dutch_auction' === $posted_type );\n\n        \/\/ Also accept if the existing term is already dutch_auction (locked auction re-save)\n        $existing_terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        $has_auction_term = ! is_wp_error( $existing_terms ) && in_array( 'dutch_auction', (array) $existing_terms, true );\n\n        $is_auction = $is_auction_posted || $has_auction_price || $type_is_auction || $has_auction_term;\n\n        if ( ! $is_auction ) {\n            return;\n        }\n\n        wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n        \/\/ If the auction has already started, vendors cannot change core auction fields.\n        $current_status  = get_post_meta( $product_id, '_kloktion_status', true );\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        if ( in_array( $current_status, $locked_statuses, true ) ) {\n            return; \/\/ Auction fields are locked; title\/description\/images handled by Dokan core.\n        }\n\n        $start_price   = isset( $_POST['_kloktion_start_price'] ) ? (float) sanitize_text_field( $_POST['_kloktion_start_price'] ) : ( isset( $data['_kloktion_start_price'] ) ? (float) $data['_kloktion_start_price'] : 0 );\n        $no_reserve    = ! empty( $_POST['_kloktion_no_reserve'] ) || ! empty( $data['_kloktion_no_reserve'] );\n        $reserve_price = $no_reserve ? 0 : ( isset( $_POST['_kloktion_reserve_price'] ) ? (float) sanitize_text_field( $_POST['_kloktion_reserve_price'] ) : ( isset( $data['_kloktion_reserve_price'] ) ? (float) $data['_kloktion_reserve_price'] : 0 ) );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : ( isset( $data['_kloktion_duration'] ) ? absint( $data['_kloktion_duration'] ) : 86400 );\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n\n        update_post_meta( $product_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $product_id, '_kloktion_duration', $duration );\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        if ( ! $status ) {\n            $now = time();\n            update_post_meta( $product_id, '_kloktion_status', 'active' );\n            update_post_meta( $product_id, '_kloktion_start_time', $now );\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n            Logger::log( $product_id, 'active', $start_price, get_current_user_id() );\n        }\n    }\n\n    \/**\n     * Dokan sometimes has seller-role users without the selling flag after manual\n     * account creation\/import. Enable only missing values; explicit \"no\" stays no.\n     *\/\n    public static function ensure_current_seller_enabled(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        if ( ! $user || ! in_array( 'seller', (array) $user->roles, true ) ) {\n            return;\n        }\n\n        $selling = get_user_meta( $user_id, 'dokan_enable_selling', true );\n        if ( '' === $selling ) {\n            update_user_meta( $user_id, 'dokan_enable_selling', 'yes' );\n        }\n    }\n\n    public static function add_dashboard_menu( $urls ): array {\n        $urls['kloktion-auctions'] = [\n            'title' => __( 'My Auctions', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-gavel\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-auctions' ),\n            'pos'   => 55,\n        ];\n\n        return $urls;\n    }\n\n    public static function register_query_var( $query_vars ): array {\n        $query_vars[] = 'kloktion-auctions';\n        return $query_vars;\n    }\n\n    public static function load_dashboard_template( $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-auctions'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/my-auctions.php';\n    }\n\n    \/**\n     * Register dutch_auction in Dokan's product type dropdown.\n     *\/\n    public static function register_product_type( array $types ): array {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    \/**\n     * Dokan Lite restricts Products listing to product_type='simple'.\n     * Modify the tax_query to also include 'dutch_auction'.\n     *\/\n    public static function include_auctions_in_product_listing( array $args ): array {\n        if ( empty( $args['tax_query'] ) || ! is_array( $args['tax_query'] ) ) {\n            return $args;\n        }\n\n        foreach ( $args['tax_query'] as &$clause ) {\n            if (\n                is_array( $clause )\n                && isset( $clause['taxonomy'], $clause['field'], $clause['terms'], $clause['operator'] )\n                && 'product_type' === $clause['taxonomy']\n                && 'slug' === $clause['field']\n                && 'IN' === $clause['operator']\n                && is_array( $clause['terms'] )\n                && in_array( 'simple', $clause['terms'], true )\n                && ! in_array( 'dutch_auction', $clause['terms'], true )\n            ) {\n                $clause['terms'][] = 'dutch_auction';\n            }\n        }\n        unset( $clause );\n\n        return $args;\n    }\n\n    public static function allow_dutch_auction_purchase( bool $purchasable, $product ): bool {\n        if ( ! $product instanceof Product_Type ) {\n            return $purchasable;\n        }\n        \/\/ If Dokan already marked it non-purchasable for own-product reason,\n        \/\/ re-check: guests should always be able to purchase, and\n        \/\/ non-author logged-in users should too.\n        if ( ! $purchasable && $product->get_status() === 'publish' ) {\n            $current_user = get_current_user_id();\n            if ( 0 === $current_user ) {\n                return true; \/\/ Guests can always see Add to Cart.\n            }\n            $author = absint( get_post_field( 'post_author', $product->get_id() ) );\n            if ( $author !== $current_user ) {\n                return true;\n            }\n        }\n        return $purchasable;\n    }\n\n    \/**\n     * Add \"Payouts\" menu item to Dokan vendor dashboard navigation.\n     *\/\n    public static function add_payouts_menu( array $urls ): array {\n        $urls['kloktion-payouts'] = [\n            'title' => __( 'Payouts', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-credit-card\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-payouts' ),\n            'pos'   => 60,\n        ];\n\n        return $urls;\n    }\n\n    \/**\n     * Register kloktion-payouts as a Dokan query var.\n     *\/\n    public static function register_payouts_query_var( array $query_vars ): array {\n        $query_vars[] = 'kloktion-payouts';\n        return $query_vars;\n    }\n\n    \/**\n     * Render the Payouts \/ Stripe Connect template in the vendor dashboard.\n     *\n     * Integration note for class-stripe-connect.php:\n     *   ajax_start_onboarding() must compute URLs as:\n     *     $return_url  = dokan_get_navigation_url('kloktion-payouts') . '?stripe_return=1';\n     *     $refresh_url = dokan_get_navigation_url('kloktion-payouts');\n     *   This ensures the vendor lands back on this page after Stripe onboarding.\n     *\/\n    public static function render_payouts_template( array $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-payouts'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        $account_id  = get_user_meta( $vendor_id, '_stripe_connect_account_id', true );\n        $status      = get_user_meta( $vendor_id, '_stripe_connect_status', true );\n        $onboarded_at = get_user_meta( $vendor_id, '_stripe_connect_onboarded_at', true );\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/payouts.php';\n    }\n\n    \/**\n     * Force dutch_auction product type after any save that might reset it to 'simple'.\n     * Runs late (priority 9999\/999) so Dokan's internal save cannot override.\n     * Detects auction products via existing term, POST flag, or auction meta (covers locked auctions too).\n     *\/\n    public static function force_auction_product_type( int $product_id ): void {\n        if ( $product_id <= 0 ) {\n            return;\n        }\n        \/\/ Avoid running during initial WP import\/cron saves\n        if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {\n            return;\n        }\n        \/\/ Skip revisions\n        if ( wp_is_post_revision( $product_id ) ) {\n            return;\n        }\n\n        $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        if ( is_wp_error( $terms ) ) {\n            return;\n        }\n\n        $has_auction_term = in_array( 'dutch_auction', (array) $terms, true );\n        $posted_auction   = ! empty( $_POST['_kloktion_is_auction'] );\n        $has_auction_meta = (bool) get_post_meta( $product_id, '_kloktion_start_price', true )\n                         || '1' === get_post_meta( $product_id, '_kloktion_is_auction', true );\n\n        $is_auction = $has_auction_term || $posted_auction || $has_auction_meta;\n\n        if ( $is_auction ) {\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n            clean_post_cache( $product_id );\n        }\n    }\n\n    \/**\n     * Add \"Browse Shop\" link to the Dokan vendor sidebar so vendors can exit the dashboard.\n     *\/\n    public static function add_exit_dashboard_nav( array $nav ): array {\n        $nav['kloktion-exit'] = [\n            'title'      => __( 'Browse Shop', 'kloktion-dutch-auction' ),\n            'icon'       => '<i class=\"fas fa-store\"><\/i>',\n            'url'        => site_url( '\/shop\/' ),\n            'pos'        => 200,\n            'permission' => 'dokan_view_overview_menu',\n        ];\n        return $nav;\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:22","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:22","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-plugin.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Plugin {\n\n    private static $instance = null;\n\n    public static function instance() {\n        if ( null === self::$instance ) {\n            self::$instance = new self();\n        }\n        return self::$instance;\n    }\n\n    private function __construct() {\n        $this->init_hooks();\n    }\n\n    private function init_hooks() {\n        add_action( 'plugins_loaded', [ Installer::class, 'maybe_migrate' ], 5 );\n        Installer::maybe_upgrade();\n\n        add_filter( 'cron_schedules', [ $this, 'add_cron_schedules' ] );\n        add_action( 'init', [ $this, 'register_product_type' ] );\n        add_action( 'kloktion_check_auctions', [ Cron::class, 'check_auctions' ] );\n        add_action( 'kloktion_check_penalties', [ Cron::class, 'check_unpaid_wins' ] );\n        add_action( 'kloktion_auto_release_escrow', [ Cron::class, 'auto_release_expired_escrow' ] );\n\n        \/\/ Schedule daily penalty check if not already scheduled\n        if ( ! wp_next_scheduled( 'kloktion_check_penalties' ) ) {\n            wp_schedule_event( time(), 'daily', 'kloktion_check_penalties' );\n        }\n\n        if ( is_admin() ) {\n            add_action( 'admin_menu', [ Admin::class, 'register_menu' ] );\n            add_action( 'admin_enqueue_scripts', [ $this, 'admin_assets' ] );\n            Admin::init_product_hooks();\n        }\n\n        \/\/ Payment\/order hooks must load everywhere (including admin)\n        \/\/ so manual order-status changes also trigger auction finalization.\n        Checkout_Handler::init();\n\n        if ( ! is_admin() || wp_doing_ajax() ) {\n            add_action( 'wp_enqueue_scripts', [ $this, 'frontend_assets' ] );\n            Cart_Handler::init();\n        }\n\n        add_action( 'rest_api_init', [ Rest_Api::class, 'register_routes' ] );\n\n        Dokan::init();\n        Watchlist::init();\n        My_Account::init();\n        Emails::init();\n        One_Click::init();\n        Card_Manager::init();\n        Stripe_Connect::init();\n        Stripe_Payment::init();\n        Invoice::init();\n\n        add_filter( 'woocommerce_product_class', [ $this, 'product_class' ], 10, 2 );\n        add_filter( 'product_type_selector', [ $this, 'add_product_type' ] );\n        add_filter( 'woocommerce_get_price_html', [ $this, 'auction_price_html' ], 10, 2 );\n        add_filter( 'woocommerce_product_single_add_to_cart_text', [ $this, 'add_to_cart_text' ], 10, 2 );\n        add_filter( 'woocommerce_product_add_to_cart_text', [ $this, 'add_to_cart_text' ], 10, 2 );\n        add_action( 'woocommerce_single_product_summary', [ $this, 'auction_info_display' ], 25 );\n        add_action( 'woocommerce_after_shop_loop_item_title', [ $this, 'archive_auction_badge' ], 6 );\n        add_action( 'woocommerce_dutch_auction_add_to_cart', [ $this, 'add_to_cart_template' ] );\n        add_shortcode( 'kloktion_auction', [ $this, 'shortcode_auction' ] );\n        add_shortcode( 'kloktion_auctions', [ $this, 'shortcode_auctions_list' ] );\n        add_action( 'init', [ $this, 'load_textdomain' ] );\n\n        \/\/ Hide ended auctions from shop\/category\/search pages.\n        add_action( 'kloktion_status_changed', [ $this, 'sync_catalog_visibility' ], 10, 3 );\n        add_filter( 'woocommerce_related_products', [ $this, 'filter_related_products' ], 10, 3 );\n        add_action( 'woocommerce_product_query', [ $this, 'exclude_ended_auctions_from_shop' ] );\n\n        \/\/ reCAPTCHA v3 on login\/register forms\n        add_action( 'login_form', [ __CLASS__, 'on_login_form' ] );\n        add_action( 'register_form', [ __CLASS__, 'on_register_form' ] );\n        add_action( 'woocommerce_register_form', [ __CLASS__, 'on_register_form' ] );\n        add_filter( 'authenticate', [ __CLASS__, 'filter_authenticate' ], 30, 3 );\n        add_filter( 'registration_errors', [ __CLASS__, 'filter_registration_errors' ], 10, 3 );\n        add_filter( 'woocommerce_registration_errors', [ __CLASS__, 'filter_registration_errors' ], 10, 3 );\n    }\n\n    public function add_cron_schedules( $schedules ) {\n        $schedules['every_minute'] = [\n            'interval' => 60,\n            'display'  => __( 'Every Minute', 'kloktion-dutch-auction' ),\n        ];\n        return $schedules;\n    }\n\n    public function register_product_type() {\n    }\n\n    public function product_class( $classname, $product_type ) {\n        if ( 'dutch_auction' === $product_type ) {\n            return Product_Type::class;\n        }\n        return $classname;\n    }\n\n    public function add_product_type( $types ) {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    public function auction_price_html( $price_html, $product ) {\n        if ( ! $product instanceof Product_Type ) {\n            return $price_html;\n        }\n\n        $status = $product->get_auction_status();\n\n        if ( 'sold' === $status ) {\n            $sold_price = (float) get_post_meta( $product->get_id(), '_kloktion_sold_price', true );\n            return '<span class=\"kloktion-price-sold\">' . sprintf(\n                __( 'SOLD at %s', 'kloktion-dutch-auction' ),\n                wc_price( $sold_price )\n            ) . '<\/span>';\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            return '<span class=\"kloktion-price-pending\">' . __( 'Pending Payment', 'kloktion-dutch-auction' ) . '<\/span>';\n        }\n\n        if ( in_array( $status, [ 'expired', 'stopped' ], true ) ) {\n            return '<span class=\"kloktion-price-ended\">' . __( 'Auction Ended', 'kloktion-dutch-auction' ) . '<\/span>';\n        }\n\n        if ( 'scheduled' === $status ) {\n            $start_price = (float) get_post_meta( $product->get_id(), '_kloktion_start_price', true );\n            return '<span class=\"kloktion-price-scheduled\">' . sprintf(\n                __( 'Starting at %s', 'kloktion-dutch-auction' ),\n                wc_price( $start_price )\n            ) . '<\/span>';\n        }\n\n        \/\/ Active or paused \u2014 clean price, no crossed-out original.\n        $current = $product->get_price();\n        return wc_price( $current );\n    }\n\n    public function add_to_cart_text( $text, $product ) {\n        if ( ! $product instanceof Product_Type ) {\n            return $text;\n        }\n\n        $status = $product->get_auction_status();\n\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return __( 'View Auction', 'kloktion-dutch-auction' );\n        }\n\n        return sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) );\n    }\n\n    public function auction_info_display() {\n        global $product;\n\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $template = KLOKTION_PLUGIN_DIR . 'templates\/single-product\/auction-info.php';\n        if ( file_exists( $template ) ) {\n            include $template;\n        }\n    }\n\n    \/\/ Usage: [kloktion_auction] or [kloktion_auction id=\"123\"]\n    public function shortcode_auction( $atts ): string {\n        $atts = shortcode_atts( [ 'id' => '' ], $atts, 'kloktion_auction' );\n\n        $product_id = ! empty( $atts['id'] ) ? absint( $atts['id'] ) : get_the_ID();\n        $product    = wc_get_product( $product_id );\n\n        if ( ! $product instanceof Product_Type ) {\n            return '';\n        }\n\n        if ( ! wp_script_is( 'kloktion-frontend', 'enqueued' ) ) {\n            $this->enqueue_shortcode_assets( $product_id );\n        }\n\n        ob_start();\n        $template = KLOKTION_PLUGIN_DIR . 'templates\/single-product\/auction-info.php';\n        if ( file_exists( $template ) ) {\n            include $template;\n        }\n        return ob_get_clean();\n    }\n\n    private function enqueue_shortcode_assets( int $product_id ): void {\n        wp_enqueue_style(\n            'kloktion-frontend',\n            KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-frontend.css',\n            [],\n            KLOKTION_VERSION\n        );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        $status   = Auction_Engine::get_status( $product_id );\n\n        wp_enqueue_script(\n            'kloktion-frontend',\n            KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-frontend.js',\n            [],\n            KLOKTION_VERSION,\n            true\n        );\n\n        wp_localize_script( 'kloktion-frontend', 'kloctionData', [\n            'apiBase'      => rest_url( 'kloktion\/v1' ),\n            'nonce'        => wp_create_nonce( 'wp_rest' ),\n            'ajaxUrl'      => admin_url( 'admin-ajax.php' ),\n            'productId'    => $product_id,\n            'pollInterval' => (int) ( $settings['poll_interval'] ?? 2 ),\n            'status'       => $status,\n            'currentPrice' => Auction_Engine::calculate_price( $product_id ),\n            'startPrice'   => (float) get_post_meta( $product_id, '_kloktion_start_price', true ),\n            'reservePrice' => (float) get_post_meta( $product_id, '_kloktion_reserve_price', true ),\n            'timeRemaining'=> Auction_Engine::get_time_remaining( $product_id ),\n            'progress'     => Auction_Engine::get_progress( $product_id ),\n            'currency'     => get_woocommerce_currency_symbol(),\n        ] );\n    }\n\n    public function archive_auction_badge() {\n        global $product;\n\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        $badges = [\n            'active'    => [ 'label' => __( 'LIVE', 'kloktion-dutch-auction' ), 'class' => 'active' ],\n            'paused'    => [ 'label' => __( 'LAST CHANCE', 'kloktion-dutch-auction' ), 'class' => 'paused' ],\n            'scheduled' => [ 'label' => __( 'COMING SOON', 'kloktion-dutch-auction' ), 'class' => 'scheduled' ],\n            'pending_purchase' => [ 'label' => __( 'PENDING PAYMENT', 'kloktion-dutch-auction' ), 'class' => 'processing' ],\n            'sold'      => [ 'label' => __( 'SOLD', 'kloktion-dutch-auction' ), 'class' => 'sold' ],\n            'expired'   => [ 'label' => __( 'ENDED', 'kloktion-dutch-auction' ), 'class' => 'ended' ],\n            'stopped'   => [ 'label' => __( 'STOPPED', 'kloktion-dutch-auction' ), 'class' => 'stopped' ],\n        ];\n\n        $badge = $badges[ $status ] ?? $badges['expired'];\n        printf(\n            '<span class=\"kloktion-badge kloktion-badge--%s\">%s<\/span>',\n            esc_attr( $badge['class'] ),\n            esc_html( $badge['label'] )\n        );\n    }\n\n    \/**\n     * [kloktion_auctions] \u2014 list auctions filtered by status.\n     *\n     * Attributes: status (active|paused|scheduled|pending_purchase|sold|expired|stopped), limit, columns, orderby\n     * Usage: [kloktion_auctions status=\"active\" limit=\"12\" columns=\"3\"]\n     *\/\n    public function shortcode_auctions_list( $atts ): string {\n        $atts = shortcode_atts( [\n            'status'  => 'active',\n            'limit'   => 12,\n            'columns' => 3,\n            'orderby' => 'date',\n            'order'   => 'DESC',\n        ], $atts, 'kloktion_auctions' );\n\n        $valid = [ 'active', 'paused', 'scheduled', 'pending_purchase', 'sold', 'expired', 'stopped' ];\n        $status = in_array( $atts['status'], $valid, true ) ? $atts['status'] : 'active';\n\n        global $wpdb;\n        $order = 'ASC' === strtoupper( $atts['order'] ) ? 'ASC' : 'DESC';\n        $product_ids = $wpdb->get_col(\n            $wpdb->prepare(\n                \"SELECT pm.post_id\n                 FROM {$wpdb->postmeta} pm\n                 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                 WHERE pm.meta_key = '_kloktion_status'\n                   AND pm.meta_value = %s\n                   AND p.post_status = 'publish'\n                 ORDER BY p.post_date {$order}\n                 LIMIT %d\",\n                $status,\n                absint( $atts['limit'] )\n            )\n        );\n\n        if ( empty( $product_ids ) ) {\n            return '<p class=\"kloktion-no-auctions\">' . esc_html__( 'No auctions found.', 'kloktion-dutch-auction' ) . '<\/p>';\n        }\n\n        return do_shortcode( '[products ids=\"' . implode( ',', array_map( 'absint', $product_ids ) ) . '\" columns=\"' . absint( $atts['columns'] ) . '\"]' );\n    }\n\n    public function add_to_cart_template() {\n        \/\/ Dutch Auction purchases are handled by the Kloktion safety toggle +\n        \/\/ Buy Now flow. Do not render WooCommerce's direct add-to-cart button.\n        return;\n    }\n\n    public function admin_assets( $hook ) {\n        $screen = get_current_screen();\n        if ( ! $screen ) {\n            return;\n        }\n\n        if ( in_array( $screen->id, [ 'product', 'edit-product' ], true )\n             || strpos( $screen->id, 'kloktion' ) !== false ) {\n            wp_enqueue_style(\n                'kloktion-admin',\n                KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-admin.css',\n                [],\n                KLOKTION_VERSION\n            );\n            wp_enqueue_script(\n                'kloktion-admin',\n                KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-admin.js',\n                [ 'jquery' ],\n                KLOKTION_VERSION,\n                true\n            );\n            wp_localize_script( 'kloktion-admin', 'kloctionAdmin', [\n                'nonce'  => wp_create_nonce( 'kloktion_admin' ),\n                'ajaxurl'=> admin_url( 'admin-ajax.php' ),\n            ] );\n        }\n\n        \/\/ Moderation queue page \u2014 enqueue dedicated JS + CSS.\n        if ( strpos( $screen->id, 'kloktion-moderation' ) !== false ) {\n            wp_enqueue_style(\n                'kloktion-admin-moderation',\n                KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-admin-moderation.css',\n                [ 'kloktion-admin' ],\n                KLOKTION_VERSION\n            );\n            wp_enqueue_script(\n                'kloktion-admin-moderation',\n                KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-admin-moderation.js',\n                [ 'jquery', 'kloktion-admin' ],\n                KLOKTION_VERSION,\n                true\n            );\n        }\n    }\n\n    public function frontend_assets() {\n        $on_dokan = function_exists( 'dokan_is_seller_dashboard' ) && dokan_is_seller_dashboard();\n        if ( ! is_product() && ! is_shop() && ! is_product_category() && ! is_product_tag() && ! is_account_page() && ! is_front_page() && ! is_cart() && ! is_checkout() && ! $on_dokan ) {\n            return;\n        }\n\n        wp_enqueue_style(\n            'kloktion-frontend',\n            KLOKTION_PLUGIN_URL . 'assets\/css\/kloktion-frontend.css',\n            [],\n            KLOKTION_VERSION\n        );\n\n        if ( is_shop() || is_product_category() || is_product_tag() ) {\n            wp_enqueue_script( 'kloktion-archive-hearts', false, [], KLOKTION_VERSION, true );\n            wp_add_inline_script( 'kloktion-archive-hearts', '\n(function(){\n    var ajaxUrl = ' . wp_json_encode( admin_url( 'admin-ajax.php' ) ) . ';\n    document.addEventListener(\"click\", function(e) {\n        var btn = e.target.closest(\".kloktion-heart--archive\");\n        if (!btn) return;\n        e.preventDefault();\n        e.stopPropagation();\n        var login = btn.getAttribute(\"data-login\");\n        if (login) { window.location.href = login; return; }\n        var pid = btn.getAttribute(\"data-product-id\");\n        var nonce = btn.getAttribute(\"data-nonce\");\n        var fd = new FormData();\n        fd.append(\"action\", \"kloktion_toggle_watch\");\n        fd.append(\"product_id\", pid);\n        fd.append(\"nonce\", nonce);\n        fetch(ajaxUrl, { method: \"POST\", body: fd, credentials: \"same-origin\" })\n            .then(function(r) { return r.json(); })\n            .then(function(r) {\n                if (r.success) {\n                    btn.classList.toggle(\"kloktion-heart--active\", r.data.watching);\n                    btn.classList.add(\"kloktion-heart--animating\");\n                    setTimeout(function() { btn.classList.remove(\"kloktion-heart--animating\"); }, 400);\n                }\n            });\n    });\n})();' );\n        }\n\n        if ( is_account_page() && is_user_logged_in() ) {\n            wp_enqueue_script(\n                'kloktion-buyer-escrow',\n                KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-buyer-escrow.js',\n                [],\n                KLOKTION_VERSION,\n                true\n            );\n            wp_localize_script( 'kloktion-buyer-escrow', 'kloctionEscrow', [\n                'apiBase' => rest_url( 'kloktion\/v1' ),\n                'nonce'   => wp_create_nonce( 'wp_rest' ),\n                'i18n'    => [\n                    'confirmPrompt'          => __( 'Are you sure? This will release funds to the seller.', 'kloktion-dutch-auction' ),\n                    'confirmBtn'             => __( 'Confirm Delivery', 'kloktion-dutch-auction' ),\n                    'confirming'             => __( 'Confirming\\u2026', 'kloktion-dutch-auction' ),\n                    'disputeTitle'           => __( 'Report a Problem', 'kloktion-dutch-auction' ),\n                    'disputeDesc'            => __( 'Describe the issue with your order. Our support team will review and respond within 24 hours.', 'kloktion-dutch-auction' ),\n                    'reasonPlaceholder'      => __( 'Describe the problem in detail (minimum 10 characters)\\u2026', 'kloktion-dutch-auction' ),\n                    'reasonTooShort'         => __( 'Please provide a detailed reason (min 10 characters).', 'kloktion-dutch-auction' ),\n                    'submitDispute'          => __( 'Submit Dispute', 'kloktion-dutch-auction' ),\n                    'submitting'             => __( 'Submitting\\u2026', 'kloktion-dutch-auction' ),\n                    'cancel'                 => __( 'Cancel', 'kloktion-dutch-auction' ),\n                    'close'                  => __( 'Close', 'kloktion-dutch-auction' ),\n                    'error'                  => __( 'An error occurred. Please try again.', 'kloktion-dutch-auction' ),\n                    'expired'                => __( 'Expired', 'kloktion-dutch-auction' ),\n                    'noticeReceiptConfirmed' => __( 'Receipt confirmed. Funds have been released to the seller.', 'kloktion-dutch-auction' ),\n                    'noticeDisputeOpened'    => __( 'Dispute opened. Our team will review your case shortly.', 'kloktion-dutch-auction' ),\n                ],\n            ] );\n        }\n\n        $is_stripe_needed = is_product() || is_account_page() || ( function_exists( 'dokan_is_seller_dashboard' ) && dokan_is_seller_dashboard() );\n        if ( $is_stripe_needed ) {\n            wp_enqueue_script( 'stripe-js-v3', 'https:\/\/js.stripe.com\/v3\/', [], null, true );\n        }\n\n        if ( is_product() ) {\n            $product_id = get_the_ID();\n            $terms      = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n            if ( ! is_wp_error( $terms ) && in_array( 'dutch_auction', $terms, true ) ) {\n                $settings = get_option( 'kloktion_settings', [] );\n                $status   = Auction_Engine::get_status( $product_id );\n\n                wp_enqueue_script(\n                    'kloktion-frontend',\n                    KLOKTION_PLUGIN_URL . 'assets\/js\/kloktion-frontend.js',\n                    [ 'stripe-js-v3' ],\n                    KLOKTION_VERSION,\n                    true\n                );\n\n                wp_localize_script( 'kloktion-frontend', 'kloctionData', [\n                    'apiBase'              => rest_url( 'kloktion\/v1' ),\n                    'nonce'                => wp_create_nonce( 'wp_rest' ),\n                    'ajaxUrl'              => admin_url( 'admin-ajax.php' ),\n                    'productId'            => $product_id,\n                    'pollInterval'         => (int) ( $settings['poll_interval'] ?? 2 ),\n                    'status'               => $status,\n                    'currentPrice'         => Auction_Engine::calculate_price( $product_id ),\n                    'startPrice'           => (float) get_post_meta( $product_id, '_kloktion_start_price', true ),\n                    'reservePrice'         => (float) get_post_meta( $product_id, '_kloktion_reserve_price', true ),\n                    'timeRemaining'        => Auction_Engine::get_time_remaining( $product_id ),\n                    'progress'             => Auction_Engine::get_progress( $product_id ),\n                    'currency'             => get_woocommerce_currency_symbol(),\n                    'stripePublishableKey' => self::get_stripe_publishable_key(),\n                    'restRoot'             => esc_url_raw( rest_url() ),\n                    'restNonce'            => wp_create_nonce( 'wp_rest' ),\n                    'i18n'                 => [\n                        'addCardTitle' => __( 'Add your card to bid', 'kloktion-dutch-auction' ),\n                        'addCardDesc'  => __( 'Register a card to participate in auctions. Zero-euro authorization hold only.', 'kloktion-dutch-auction' ),\n                        'saveCardBtn'  => __( 'Save card', 'kloktion-dutch-auction' ),\n                        'goToWallet'   => __( 'Or open My Wallet', 'kloktion-dutch-auction' ),\n                    ],\n                ] );\n\n                \/\/ reCAPTCHA v3 for anti-bot protection on Buy Now\n                $recaptcha_key = get_option( 'kloktion_recaptcha_site_key', '' );\n                if ( $recaptcha_key ) {\n                    wp_enqueue_script( 'google-recaptcha', 'https:\/\/www.google.com\/recaptcha\/api.js?render=' . urlencode( $recaptcha_key ), [], null, true );\n                }\n\n                \/\/ FingerprintJS \u2014 anti-bot\/anti-duplicate-account protection\n                wp_enqueue_script(\n                    'fingerprint-js',\n                    'https:\/\/openfpcdn.io\/fingerprintjs\/v4',\n                    [],\n                    '4.0.0',\n                    true\n                );\n                wp_add_inline_script(\n                    'fingerprint-js',\n                    \"(function(){async function collect(){try{const fp=await FingerprintJS.load({monitoring:false});const r=await fp.get();if(r&&r.visitorId){document.cookie='kloktion_fp='+r.visitorId+';path=\/;max-age=2592000;SameSite=Lax';if(window.klokDA){window.klokDA.fingerprint=r.visitorId;}}}catch(e){}}if(typeof FingerprintJS!=='undefined'){collect();}else{window.addEventListener('load',function(){if(typeof FingerprintJS!=='undefined')collect();});}})();\",\n                    'after'\n                );\n\n                \/\/ Add card status to localized data for padlock\/popup\n                if ( is_user_logged_in() ) {\n                    wp_localize_script( 'kloktion-frontend', 'kloctionCard', [\n                        'hasCard'     => Card_Manager::has_valid_card( get_current_user_id() ),\n                        'hasConsent'  => Card_Manager::has_consent( get_current_user_id() ),\n                        'walletUrl'   => wc_get_account_endpoint_url( 'my-wallet' ),\n                        'recaptchaKey'=> $recaptcha_key,\n                    ] );\n                }\n            }\n        }\n\n        \/\/ reCAPTCHA v3 on login, registration, and Dokan seller registration pages.\n        $should_load_recaptcha = is_product()\n            || strpos( $_SERVER['REQUEST_URI'] ?? '', 'wp-login' ) !== false\n            || ( function_exists( 'is_account_page' ) && is_account_page() )\n            || ( function_exists( 'dokan_is_seller_dashboard' ) && dokan_is_seller_dashboard() )\n            || ( is_page() && has_shortcode( get_post_field( 'post_content', get_the_ID() ) ?: '', 'dokan-dashboard' ) );\n\n        if ( $should_load_recaptcha ) {\n            $recaptcha_key = get_option( 'kloktion_recaptcha_site_key', '' );\n            if ( $recaptcha_key ) {\n                wp_enqueue_script( 'google-recaptcha', 'https:\/\/www.google.com\/recaptcha\/api.js?render=' . urlencode( $recaptcha_key ), [], null, true );\n            }\n        }\n    }\n\n    \/**\n     * Inject reCAPTCHA v3 token into login\/register\/WooCommerce register forms.\n     * Uses hidden input + JS to fetch token on submit.\n     *\/\n    public static function inject_recaptcha_form_handler(): void {\n        $key = get_option( 'kloktion_recaptcha_site_key', '' );\n        if ( empty( $key ) ) {\n            return;\n        }\n        ?>\n        <input type=\"hidden\" name=\"kloktion_recaptcha_token\" id=\"kloktion_recaptcha_token\" value=\"\">\n        <script>\n        (function(){\n            var form = document.currentScript && document.currentScript.closest('form');\n            if (!form) return;\n            form.addEventListener('submit', function(e){\n                if (typeof grecaptcha === 'undefined') return;\n                e.preventDefault();\n                grecaptcha.ready(function(){\n                    grecaptcha.execute('<?php echo esc_js( $key ); ?>', { action: 'kloktion_form' }).then(function(token){\n                        document.getElementById('kloktion_recaptcha_token').value = token;\n                        form.submit();\n                    });\n                });\n            }, { once: false });\n        })();\n        <\/script>\n        <?php\n    }\n\n    \/**\n     * Verify reCAPTCHA v3 token on login\/register. Fails gracefully if not configured.\n     *\/\n    public static function verify_recaptcha_token(): bool {\n        $secret = get_option( 'kloktion_recaptcha_secret_key', '' );\n        if ( empty( $secret ) ) {\n            return true; \/\/ Not configured, don't block\n        }\n        $token = isset( $_POST['kloktion_recaptcha_token'] ) ? sanitize_text_field( wp_unslash( $_POST['kloktion_recaptcha_token'] ) ) : '';\n        if ( empty( $token ) ) {\n            return false;\n        }\n        $response = wp_remote_post( 'https:\/\/www.google.com\/recaptcha\/api\/siteverify', [\n            'body' => [\n                'secret'   => $secret,\n                'response' => $token,\n                'remoteip' => $_SERVER['REMOTE_ADDR'] ?? '',\n            ],\n            'timeout' => 8,\n        ] );\n        if ( is_wp_error( $response ) ) {\n            return true; \/\/ Network error, don't block auth\n        }\n        $data = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! is_array( $data ) || empty( $data['success'] ) ) {\n            return false;\n        }\n        $score = isset( $data['score'] ) ? (float) $data['score'] : 0.0;\n        return $score >= 0.3; \/\/ Lenient threshold, login is high-intent so rarely blocked\n    }\n\n    public static function on_login_form(): void {\n        self::inject_recaptcha_form_handler();\n    }\n\n    public static function on_register_form(): void {\n        self::inject_recaptcha_form_handler();\n    }\n\n    public static function filter_authenticate( $user, $username, $password ) {\n        if ( empty( $username ) && empty( $password ) ) {\n            return $user;\n        }\n        \/\/ Only validate when this is an actual login POST\n        if ( empty( $_POST ) ) {\n            return $user;\n        }\n        if ( ! self::verify_recaptcha_token() ) {\n            return new \\WP_Error( 'kloktion_recaptcha_failed', __( 'Bot check failed. Please reload the page and try again.', 'kloktion-dutch-auction' ) );\n        }\n        return $user;\n    }\n\n    public static function filter_registration_errors( $errors, $sanitized_user_login = '', $user_email = '' ) {\n        if ( ! self::verify_recaptcha_token() ) {\n            $errors->add( 'kloktion_recaptcha_failed', __( 'Bot check failed. Please reload the page and try again.', 'kloktion-dutch-auction' ) );\n        }\n        return $errors;\n    }\n\n    public function load_textdomain() {\n        load_plugin_textdomain( 'kloktion-dutch-auction', false, dirname( KLOKTION_PLUGIN_BASENAME ) . '\/languages' );\n    }\n\n    \/**\n     * Keep WC catalog visibility in sync with auction status.\n     * Ended auctions are hidden from shop\/category\/search.\n     *\/\n    public function sync_catalog_visibility( int $product_id, string $new_status, string $old_status ): void {\n        $product = wc_get_product( $product_id );\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $hidden_statuses = [ 'sold', 'expired', 'stopped' ];\n\n        if ( in_array( $new_status, $hidden_statuses, true ) ) {\n            $product->set_catalog_visibility( 'hidden' );\n            $product->save();\n        } elseif ( in_array( $old_status, $hidden_statuses, true ) ) {\n            $product->set_catalog_visibility( 'visible' );\n            $product->save();\n        }\n    }\n\n    \/**\n     * Exclude ended\/sold\/stopped auctions from shop, category and search queries.\n     * Safety net: even if catalog_visibility is out of sync, these won't appear.\n     *\/\n    public function exclude_ended_auctions_from_shop( $q ): void {\n        if ( is_admin() ) {\n            return;\n        }\n\n        $hidden_statuses = [ 'sold', 'expired', 'stopped' ];\n\n        $meta_query = $q->get( 'meta_query' );\n        if ( ! is_array( $meta_query ) ) {\n            $meta_query = [];\n        }\n\n        $meta_query[] = [\n            'relation' => 'OR',\n            [\n                'key'     => '_kloktion_status',\n                'compare' => 'NOT EXISTS',\n            ],\n            [\n                'key'     => '_kloktion_status',\n                'value'   => $hidden_statuses,\n                'compare' => 'NOT IN',\n            ],\n        ];\n\n        $q->set( 'meta_query', $meta_query );\n    }\n\n    \/**\n     * Resolve the Stripe publishable key for frontend use.\n     *\n     * Checks (in order):\n     *  1. Standalone option `kloktion_stripe_publishable_key` (set via Settings UI).\n     *  2. WooCommerce Stripe Gateway settings (test_publishable_key \/ publishable_key).\n     *\/\n    private static function get_stripe_publishable_key(): string {\n        $key = get_option( 'kloktion_stripe_publishable_key', '' );\n        if ( ! empty( $key ) ) {\n            return $key;\n        }\n\n        \/\/ Fallback: read from WooCommerce Stripe Gateway option.\n        $stripe_settings = get_option( 'woocommerce_stripe_settings', [] );\n        $test_mode       = ( $stripe_settings['testmode'] ?? 'yes' ) === 'yes';\n\n        return $test_mode\n            ? ( $stripe_settings['test_publishable_key'] ?? '' )\n            : ( $stripe_settings['publishable_key'] ?? '' );\n    }\n\n    \/**\n     * Only show active auctions in Related Products.\n     *\/\n    public function filter_related_products( array $related_ids, int $product_id, array $args ): array {\n        if ( empty( $related_ids ) ) {\n            return $related_ids;\n        }\n\n        return array_values( array_filter( $related_ids, function ( $id ) {\n            $status = get_post_meta( $id, '_kloktion_status', true );\n            if ( ! $status ) {\n                return true; \/\/ Not an auction product.\n            }\n            return in_array( $status, [ 'active', 'paused', 'processing' ], true );\n        } ) );\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:23","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-product-type.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Product_Type extends \\WC_Product_Simple {\n\n    public function get_type() {\n        return 'dutch_auction';\n    }\n\n    public function get_price( $context = 'view' ) {\n        if ( 'edit' === $context ) {\n            return parent::get_price( $context );\n        }\n\n        \/\/ If this product is in the cart with a frozen price, return that price\n        \/\/ so Cart\/Checkout display stays consistent with the locked amount.\n        if ( function_exists( 'WC' ) && WC()->cart ) {\n            foreach ( WC()->cart->get_cart() as $item ) {\n                if ( isset( $item['kloktion_frozen_price'] )\n                     && (int) ( $item['kloktion_product_id'] ?? 0 ) === $this->get_id()\n                ) {\n                    return (float) $item['kloktion_frozen_price'];\n                }\n            }\n        }\n\n        $status = $this->get_auction_status();\n        if ( in_array( $status, [ 'active', 'paused', 'processing', 'pending_purchase' ], true ) ) {\n            return Auction_Engine::calculate_price( $this->get_id() );\n        }\n\n        \/\/ For sold \u2014 return sold price.\n        if ( 'sold' === $status ) {\n            $sold = get_post_meta( $this->get_id(), '_kloktion_sold_price', true );\n            return $sold ? (float) $sold : parent::get_price( $context );\n        }\n\n        return (float) get_post_meta( $this->get_id(), '_kloktion_start_price', true ) ?: parent::get_price( $context );\n    }\n\n    public function get_regular_price( $context = 'view' ) {\n        if ( 'edit' === $context ) {\n            return parent::get_regular_price( $context );\n        }\n        return (float) get_post_meta( $this->get_id(), '_kloktion_start_price', true ) ?: parent::get_regular_price( $context );\n    }\n\n    public function get_sale_price( $context = 'view' ) {\n        if ( 'edit' === $context ) {\n            return parent::get_sale_price( $context );\n        }\n\n        $status = $this->get_auction_status();\n        if ( in_array( $status, [ 'active', 'paused', 'processing', 'pending_purchase' ], true ) ) {\n            return Auction_Engine::calculate_price( $this->get_id() );\n        }\n        return '';\n    }\n\n    public function is_on_sale( $context = 'view' ) {\n        \/\/ Never show WC \"Sale!\" badge \u2014 the Kloktion widget handles price display.\n        return false;\n    }\n\n    public function get_price_html( $price = '' ) {\n        $status = $this->get_auction_status();\n\n        if ( in_array( $status, [ 'active', 'paused', 'processing', 'pending_purchase' ], true ) ) {\n            \/\/ Clean price \u2014 no crossed-out original. The Kloktion widget shows the full context.\n            return wc_price( $this->get_price() );\n        }\n\n        if ( 'sold' === $status ) {\n            return wc_price( $this->get_price() );\n        }\n\n        if ( 'scheduled' === $status ) {\n            return wc_price( $this->get_regular_price() );\n        }\n\n        \/\/ expired \/ stopped \u2014 show start price.\n        $start = $this->get_regular_price();\n        return $start ? wc_price( $start ) : '';\n    }\n\n    public function is_purchasable() {\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            return false;\n        }\n\n        $status = $this->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return false;\n        }\n        $price = $this->get_price();\n        return $price > 0 && parent::is_purchasable();\n    }\n\n    public function get_auction_status(): string {\n        return Auction_Engine::get_status( $this->get_id() );\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:23","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-rest-api.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Rest_Api {\n\n    public static function register_routes(): void {\n        register_rest_route( 'kloktion\/v1', '\/auction\/(?P<id>\\d+)', [\n            'methods'             => 'GET',\n            'callback'            => [ __CLASS__, 'get_auction' ],\n            'permission_callback' => '__return_true',\n            'args'                => [\n                'id' => [ 'type' => 'integer', 'required' => true, 'sanitize_callback' => 'absint' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/auctions', [\n            'methods'             => 'GET',\n            'callback'            => [ __CLASS__, 'get_auctions' ],\n            'permission_callback' => '__return_true',\n            'args'                => [\n                'status'   => [ 'type' => 'string', 'default' => 'active', 'sanitize_callback' => 'sanitize_text_field' ],\n                'per_page' => [ 'type' => 'integer', 'default' => 20, 'sanitize_callback' => 'absint' ],\n                'page'     => [ 'type' => 'integer', 'default' => 1, 'sanitize_callback' => 'absint' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/auction\/(?P<id>\\d+)\/stop', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'stop_auction' ],\n            'permission_callback' => [ __CLASS__, 'admin_permission' ],\n            'args'                => [\n                'id'     => [ 'type' => 'integer', 'required' => true, 'sanitize_callback' => 'absint' ],\n                'reason' => [ 'type' => 'string', 'required' => true, 'sanitize_callback' => 'sanitize_text_field' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/card\/status', [\n            'methods'             => 'GET',\n            'callback'            => [ __CLASS__, 'get_card_status' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/card\/setup-intent', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_card_setup_intent' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/card\/attach', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_card_attach' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n            'args'                => [\n                'payment_method' => [ 'required' => true, 'type' => 'string', 'sanitize_callback' => 'sanitize_text_field' ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/escrow\/(?P<id>\\d+)\/confirm', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_escrow_confirm' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n            'args'                => [\n                'id' => [ 'validate_callback' => [ __CLASS__, 'validate_numeric_arg' ] ],\n            ],\n        ] );\n\n        register_rest_route( 'kloktion\/v1', '\/escrow\/(?P<id>\\d+)\/dispute', [\n            'methods'             => 'POST',\n            'callback'            => [ __CLASS__, 'handle_escrow_dispute' ],\n            'permission_callback' => function() { return is_user_logged_in(); },\n            'args'                => [\n                'id'     => [ 'validate_callback' => [ __CLASS__, 'validate_numeric_arg' ] ],\n                'reason' => [ 'required' => true, 'type' => 'string' ],\n            ],\n        ] );\n\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Webhook' ) ) {\n            \\Kloktion\\Stripe_Webhook::register_route();\n        }\n    }\n\n    public static function admin_permission(): bool {\n        return current_user_can( 'manage_woocommerce' );\n    }\n\n    \/**\n     * REST validate_callback wrapper for numeric IDs. WP passes 3 args to validate_callback\n     * but PHP 8+ fails if using bare 'is_numeric' name. Accept all args, validate first.\n     *\/\n    public static function validate_numeric_arg( $value, $request = null, $param = null ): bool {\n        return is_numeric( $value );\n    }\n\n    \/**\n     * Honeypot check - rejects any request where the decoy field is filled.\n     * Returns true if the request is clean, WP_Error on bot detection.\n     *\/\n    private static function check_honeypot( $request = null ) {\n        $rest_val  = ( $request && method_exists( $request, 'get_param' ) ) ? (string) $request->get_param( 'website_url' ) : '';\n        $post_val  = isset( $_POST['kloktion_website_url'] ) ? (string) $_POST['kloktion_website_url'] : '';\n        $value     = $rest_val !== '' ? $rest_val : $post_val;\n\n        if ( $value !== '' ) {\n            $ip        = self::get_client_ip();\n            $ua        = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $product   = ( $request && method_exists( $request, 'get_param' ) ) ? (int) $request->get_param( 'id' ) : 0;\n            $endpoint  = ( $request && method_exists( $request, 'get_route' ) ) ? $request->get_route() : 'admin-ajax';\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=%s value=%s product=%d', $ip, $ua, $endpoint, $value, $product ) );\n            return new \\WP_Error( 'honeypot_tripped', 'Forbidden', [ 'status' => 403 ] );\n        }\n\n        return true;\n    }\n\n    private static function check_rate_limit(): bool {\n        $ip = self::get_client_ip();\n        $key     = 'kloktion_rate_' . md5( $ip );\n        $count   = (int) get_transient( $key );\n        $settings = get_option( 'kloktion_settings', [] );\n        $limit   = (int) ( $settings['rate_limit'] ?? 60 );\n\n        if ( $count >= $limit ) {\n            return false;\n        }\n\n        set_transient( $key, $count + 1, 60 );\n        return true;\n    }\n\n    private static function get_client_ip(): string {\n        \/\/ prefer WC_Geolocation (handles Cloudflare\/proxies)\n        if ( class_exists( '\\WC_Geolocation' ) ) {\n            $ip = \\WC_Geolocation::get_ip_address();\n            if ( $ip ) {\n                return $ip;\n            }\n        }\n        return $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0';\n    }\n\n    public static function get_auction( \\WP_REST_Request $request ): \\WP_REST_Response {\n        if ( ! self::check_rate_limit() ) {\n            $response = new \\WP_REST_Response( [ 'code' => 'rate_limited', 'message' => 'Too many requests' ], 429 );\n            $response->header( 'Retry-After', '60' );\n            return $response;\n        }\n\n        $product_id = $request->get_param( 'id' );\n\n        $cache_key = 'kloktion_api_' . $product_id;\n        $cached    = get_transient( $cache_key );\n        if ( false !== $cached ) {\n            return new \\WP_REST_Response( $cached, 200 );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            return new \\WP_REST_Response( [ 'code' => 'not_found', 'message' => 'Auction not found' ], 404 );\n        }\n\n        $data = self::format_auction( $product );\n\n        set_transient( $cache_key, $data, 2 );\n\n        return new \\WP_REST_Response( $data, 200 );\n    }\n\n    public static function get_auctions( \\WP_REST_Request $request ): \\WP_REST_Response {\n        if ( ! self::check_rate_limit() ) {\n            $response = new \\WP_REST_Response( [ 'code' => 'rate_limited', 'message' => 'Too many requests' ], 429 );\n            $response->header( 'Retry-After', '60' );\n            return $response;\n        }\n\n        $status   = $request->get_param( 'status' );\n        $per_page = max( 1, min( (int) $request->get_param( 'per_page' ), 100 ) );\n        $page     = max( 1, (int) $request->get_param( 'page' ) );\n\n        global $wpdb;\n\n        $valid_statuses = [ 'active', 'paused', 'scheduled', 'pending_purchase', 'sold', 'expired', 'stopped' ];\n        if ( ! in_array( $status, $valid_statuses, true ) ) {\n            $status = 'active';\n        }\n\n        $total = (int) $wpdb->get_var(\n            $wpdb->prepare(\n                \"SELECT COUNT(DISTINCT pm.post_id)\n                 FROM {$wpdb->postmeta} pm\n                 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                 WHERE pm.meta_key = '_kloktion_status'\n                   AND pm.meta_value = %s\n                   AND p.post_status = 'publish'\",\n                $status\n            )\n        );\n\n        $offset     = ( $page - 1 ) * $per_page;\n        $product_ids = $wpdb->get_col(\n            $wpdb->prepare(\n                \"SELECT pm.post_id\n                 FROM {$wpdb->postmeta} pm\n                 INNER JOIN {$wpdb->posts} p ON p.ID = pm.post_id\n                 WHERE pm.meta_key = '_kloktion_status'\n                   AND pm.meta_value = %s\n                   AND p.post_status = 'publish'\n                 ORDER BY p.ID DESC\n                 LIMIT %d OFFSET %d\",\n                $status,\n                $per_page,\n                $offset\n            )\n        );\n\n        $auctions = [];\n        foreach ( $product_ids as $pid ) {\n            $product = wc_get_product( (int) $pid );\n            if ( $product instanceof Product_Type ) {\n                $auctions[] = self::format_auction( $product );\n            }\n        }\n\n        $response = new \\WP_REST_Response( $auctions, 200 );\n        $response->header( 'X-WP-Total', $total );\n        $response->header( 'X-WP-TotalPages', ceil( $total \/ $per_page ) );\n\n        return $response;\n    }\n\n    public static function stop_auction( \\WP_REST_Request $request ): \\WP_REST_Response {\n        $product_id = $request->get_param( 'id' );\n        $reason     = $request->get_param( 'reason' );\n\n        if ( empty( $reason ) ) {\n            return new \\WP_REST_Response( [ 'code' => 'missing_reason', 'message' => 'Reason is required' ], 400 );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            return new \\WP_REST_Response( [ 'code' => 'not_found', 'message' => 'Auction not found' ], 404 );\n        }\n\n        $result = Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( ! $result ) {\n            return new \\WP_REST_Response( [ 'code' => 'cannot_stop', 'message' => 'Auction cannot be stopped in its current state' ], 400 );\n        }\n\n        return new \\WP_REST_Response( [ 'success' => true, 'message' => 'Auction stopped' ], 200 );\n    }\n\n    public static function get_card_status( \\WP_REST_Request $request ): \\WP_REST_Response {\n        $user_id = get_current_user_id();\n\n        return new \\WP_REST_Response( [\n            'has_card'   => Card_Manager::has_valid_card( $user_id ),\n            'has_consent'=> Card_Manager::has_consent( $user_id ),\n            'card_info'  => Card_Manager::get_card_info( $user_id ),\n        ], 200 );\n    }\n\n    public static function handle_card_setup_intent( \\WP_REST_Request $request ) {\n        $hp = self::check_honeypot( $request );\n        if ( is_wp_error( $hp ) ) {\n            return $hp;\n        }\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return new \\WP_Error( 'kloktion_auth_required', __( 'You must be logged in.', 'kloktion-dutch-auction' ), [ 'status' => 401 ] );\n        }\n        $client_secret = Card_Manager::create_setup_intent_for_user( $user_id );\n        if ( is_wp_error( $client_secret ) ) {\n            return $client_secret;\n        }\n        return new \\WP_REST_Response( [ 'client_secret' => $client_secret ], 200 );\n    }\n\n    public static function handle_card_attach( \\WP_REST_Request $request ) {\n        $hp = self::check_honeypot( $request );\n        if ( is_wp_error( $hp ) ) {\n            return $hp;\n        }\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return new \\WP_Error( 'kloktion_auth_required', __( 'You must be logged in.', 'kloktion-dutch-auction' ), [ 'status' => 401 ] );\n        }\n        $pm = $request->get_param( 'payment_method' );\n        if ( empty( $pm ) ) {\n            return new \\WP_Error( 'kloktion_missing_pm', __( 'Missing payment method.', 'kloktion-dutch-auction' ), [ 'status' => 400 ] );\n        }\n        $result = Card_Manager::save_payment_method( $user_id, sanitize_text_field( $pm ) );\n        if ( is_wp_error( $result ) ) {\n            return $result;\n        }\n        return new \\WP_REST_Response( [ 'success' => true ], 200 );\n    }\n\n    public static function handle_escrow_confirm( \\WP_REST_Request $request ): \\WP_REST_Response {\n        global $wpdb;\n        $escrow_id = (int) $request['id'];\n        $user_id   = get_current_user_id();\n\n        $escrow = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_escrow WHERE id = %d\",\n            $escrow_id\n        ) );\n\n        if ( ! $escrow ) {\n            return new \\WP_REST_Response( [ 'message' => 'Escrow not found' ], 404 );\n        }\n\n        \/\/ Verify buyer owns this order.\n        $order = wc_get_order( $escrow->order_id );\n        if ( ! $order || (int) $order->get_customer_id() !== $user_id ) {\n            return new \\WP_REST_Response( [ 'message' => 'Permission denied' ], 403 );\n        }\n\n        if ( 'held' !== $escrow->status ) {\n            return new \\WP_REST_Response( [ 'message' => 'Escrow cannot be confirmed in current state' ], 400 );\n        }\n\n        if ( ! class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            return new \\WP_Error(\n                'kloktion_stripe_unavailable',\n                __( 'Payment system unavailable. Please try again shortly.', 'kloktion-dutch-auction' ),\n                [ 'status' => 503 ]\n            );\n        }\n\n        $result = \\Kloktion\\Stripe_Payment::release_escrow( $escrow_id, 'buyer_confirmed' );\n        if ( is_wp_error( $result ) ) {\n            $error_data = $result->get_error_data();\n            $status     = is_array( $error_data ) && ! empty( $error_data['status'] ) ? (int) $error_data['status'] : 400;\n            return new \\WP_REST_Response(\n                [ 'success' => false, 'message' => $result->get_error_message() ],\n                $status\n            );\n        }\n\n        do_action( 'kloktion_buyer_confirmed_receipt', $escrow_id );\n\n        return new \\WP_REST_Response( [ 'success' => true, 'message' => 'Receipt confirmed. Funds released to seller.' ], 200 );\n    }\n\n    public static function handle_escrow_dispute( \\WP_REST_Request $request ): \\WP_REST_Response {\n        global $wpdb;\n        $escrow_id = (int) $request['id'];\n        $reason    = sanitize_textarea_field( $request['reason'] ?? '' );\n        $user_id   = get_current_user_id();\n\n        if ( strlen( $reason ) < 10 ) {\n            return new \\WP_REST_Response( [ 'message' => 'Please provide a detailed reason (min 10 characters)' ], 400 );\n        }\n\n        $escrow = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_escrow WHERE id = %d\",\n            $escrow_id\n        ) );\n\n        if ( ! $escrow ) {\n            return new \\WP_REST_Response( [ 'message' => 'Escrow not found' ], 404 );\n        }\n\n        $order = wc_get_order( $escrow->order_id );\n        if ( ! $order || (int) $order->get_customer_id() !== $user_id ) {\n            return new \\WP_REST_Response( [ 'message' => 'Permission denied' ], 403 );\n        }\n\n        if ( 'held' !== $escrow->status ) {\n            return new \\WP_REST_Response( [ 'message' => 'Cannot dispute in current state' ], 400 );\n        }\n\n        \/\/ Check for an existing open dispute.\n        $existing = $wpdb->get_var( $wpdb->prepare(\n            \"SELECT id FROM {$wpdb->prefix}kloktion_disputes WHERE escrow_id = %d AND status = 'open'\",\n            $escrow_id\n        ) );\n        if ( $existing ) {\n            return new \\WP_REST_Response( [ 'message' => 'A dispute is already open for this order' ], 400 );\n        }\n\n        \/\/ Insert dispute record.\n        $wpdb->insert( $wpdb->prefix . 'kloktion_disputes', [\n            'escrow_id'  => $escrow_id,\n            'order_id'   => $escrow->order_id,\n            'user_id'    => $user_id,\n            'reason'     => $reason,\n            'status'     => 'open',\n            'created_at' => current_time( 'mysql' ),\n        ] );\n\n        \/\/ Update escrow status.\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_escrow',\n            [ 'status' => 'disputed', 'updated_at' => current_time( 'mysql' ) ],\n            [ 'id' => $escrow_id ]\n        );\n        update_post_meta( $escrow->order_id, '_kloktion_escrow_status', 'disputed' );\n\n        do_action( 'kloktion_dispute_opened_by_buyer', $escrow_id, $user_id, $reason );\n\n        return new \\WP_REST_Response( [ 'success' => true, 'message' => 'Dispute opened. Our team will review it shortly.' ], 200 );\n    }\n\n    private static function format_auction( Product_Type $product ): array {\n        $id            = $product->get_id();\n        $status        = $product->get_auction_status();\n        $current_price = Auction_Engine::calculate_price( $id );\n        $start_price   = (float) get_post_meta( $id, '_kloktion_start_price', true );\n        $reserve_price = (float) get_post_meta( $id, '_kloktion_reserve_price', true );\n\n        $data = [\n            'product_id'     => $id,\n            'title'          => $product->get_name(),\n            'status'         => $status,\n            'current_price'  => $current_price,\n            'formatted_price'=> strip_tags( wc_price( $current_price ) ),\n            'start_price'    => $start_price,\n            'reserve_price'  => $reserve_price,\n            'time_remaining' => Auction_Engine::get_time_remaining( $id ),\n            'progress'       => Auction_Engine::get_progress( $id ),\n            'can_purchase'   => $product->is_purchasable() && $product->is_in_stock(),\n        ];\n\n        if ( 'paused' === $status ) {\n            $data['pause_remaining'] = Auction_Engine::get_time_remaining( $id );\n        }\n\n        if ( 'sold' === $status ) {\n            $data['sold_price'] = (float) get_post_meta( $id, '_kloktion_sold_price', true );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $data['payment_deadline'] = (int) get_post_meta( $id, '_kloktion_payment_deadline', true );\n        }\n\n        return $data;\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-09 20:13:24","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.2\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.2' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-09 20:13:24","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php","content":"<?php defined( 'ABSPATH' ) || exit; ?>\n<div class=\"dokan-form-group kloktion-dokan-fields\">\n    <h3><?php esc_html_e( 'Dutch Auction Settings', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <input type=\"hidden\" name=\"_kloktion_is_auction\" value=\"1\">\n    <p class=\"dokan-text-left\" style=\"margin:0 0 10px;color:#555;\">\n        <?php esc_html_e( 'Dutch Auction mode is enabled by default and cannot be changed.', 'kloktion-dutch-auction' ); ?>\n    <\/p>\n\n    <?php if ( $is_locked ) : ?>\n        <div style=\"background:#fff3cd;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#856404;\">\n            &#128274; <?php esc_html_e( 'Auction parameters are locked after the auction starts. You can still edit photos, title and description.', 'kloktion-dutch-auction' ); ?>\n        <\/div>\n        <style>\n            .kloktion-dokan-auction-fields input[disabled],\n            .kloktion-dokan-auction-fields select[disabled],\n            .kloktion-dokan-auction-fields textarea[disabled] {\n                background: #f0f0f0 !important;\n                color: #999 !important;\n                cursor: not-allowed !important;\n                opacity: 0.7 !important;\n                border-color: #ddd !important;\n            }\n        <\/style>\n    <?php endif; ?>\n\n    <div class=\"kloktion-dokan-auction-fields\">\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_start_price\"><?php esc_html_e( 'Start Price', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_start_price\" id=\"_kloktion_start_price\"\n                   value=\"<?php echo esc_attr( $start_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <?php $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0; ?>\n        <div class=\"dokan-form-group\">\n            <label>\n                <input type=\"checkbox\" name=\"_kloktion_no_reserve\" value=\"1\" <?php checked( $no_reserve ); ?> id=\"_kloktion_no_reserve_dokan\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <?php esc_html_e( 'No Reserve (price can drop to zero)', 'kloktion-dutch-auction' ); ?>\n            <\/label>\n        <\/div>\n        <div class=\"dokan-form-group kloktion-dokan-reserve-field\" style=\"<?php echo $no_reserve ? 'display:none;' : ''; ?>\">\n            <label for=\"_kloktion_reserve_price\"><?php esc_html_e( 'Reserve Price (minimum)', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_reserve_price\" id=\"_kloktion_reserve_price\"\n                   value=\"<?php echo esc_attr( $no_reserve ? '' : $reserve_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_duration\"><?php esc_html_e( 'Auction Duration', 'kloktion-dutch-auction' ); ?><\/label>\n            <select name=\"_kloktion_duration\" id=\"_kloktion_duration\" class=\"dokan-form-control\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <option value=\"259200\" <?php selected( $duration, 259200 ); ?>><?php esc_html_e( '3 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"432000\" <?php selected( $duration, 432000 ); ?>><?php esc_html_e( '5 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"604800\" <?php selected( $duration, 604800 ); ?>><?php esc_html_e( '7 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"864000\" <?php selected( $duration, 864000 ); ?>><?php esc_html_e( '10 days', 'kloktion-dutch-auction' ); ?><\/option>\n            <\/select>\n        <\/div>\n\n        <?php if ( $status ) : ?>\n        <div class=\"dokan-form-group\">\n            <label><?php esc_html_e( 'Current Status', 'kloktion-dutch-auction' ); ?><\/label>\n            <span class=\"dokan-label\"><?php echo esc_html( strtoupper( $status ) ); ?><\/span>\n        <\/div>\n        <?php endif; ?>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    var nrCb = document.getElementById('_kloktion_no_reserve_dokan');\n    var rField = document.querySelector('.kloktion-dokan-reserve-field');\n    if (nrCb && rField && !nrCb.disabled) {\n        nrCb.addEventListener('change', function() {\n            rField.style.display = this.checked ? 'none' : '';\n            if (this.checked) document.getElementById('_kloktion_reserve_price').value = '';\n        });\n    }\n\n    var typeField = document.querySelector('[name=\"product_type\"]');\n    if (typeField) {\n        typeField.value = 'dutch_auction';\n        typeField.disabled = true;\n\n        var hiddenType = document.createElement('input');\n        hiddenType.type = 'hidden';\n        hiddenType.name = 'product_type';\n        hiddenType.value = 'dutch_auction';\n        typeField.parentNode.appendChild(hiddenType);\n\n        var wrapper = typeField.closest('.dokan-form-group') || typeField.closest('p');\n        if (wrapper) wrapper.style.display = 'none';\n    }\n})();\n<\/script>\n"},"result":null}
{"timestamp":"2026-05-09 20:13:25","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/single-product\/auction-info.php","content":"<?php\ndefined( 'ABSPATH' ) || exit;\n\n$product_id    = $product->get_id();\n$status        = \\Kloktion\\Auction_Engine::get_status( $product_id );\n$current_price = \\Kloktion\\Auction_Engine::calculate_price( $product_id );\n$start_price   = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n$reserve_price = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n$time_left     = \\Kloktion\\Auction_Engine::get_time_remaining( $product_id );\n$progress      = \\Kloktion\\Auction_Engine::get_progress( $product_id );\n\n$has_reserve    = $reserve_price > 0;\n$kloktion_settings = get_option( 'kloktion_settings', [] );\n$global_paused  = ! empty( $kloktion_settings['global_pause'] );\n\n$badge_map = [\n    'active'     => [ 'label' => __( 'LIVE', 'kloktion-dutch-auction' ), 'class' => 'active' ],\n    'paused'     => [ 'label' => __( 'LAST CHANCE', 'kloktion-dutch-auction' ), 'class' => 'paused' ],\n    \/\/ #212 Race-to-Pay scrapped per client 2026-04-14: 'processing' => [ 'label' => __( 'IN CHECKOUT', 'kloktion-dutch-auction' ), 'class' => 'processing' ],\n    'scheduled'  => [ 'label' => __( 'STARTING SOON', 'kloktion-dutch-auction' ), 'class' => 'scheduled' ],\n    'pending_purchase' => [ 'label' => __( 'PENDING PAYMENT', 'kloktion-dutch-auction' ), 'class' => 'processing' ],\n    'sold'       => [ 'label' => __( 'SOLD', 'kloktion-dutch-auction' ), 'class' => 'sold' ],\n    'expired'    => [ 'label' => __( 'ENDED', 'kloktion-dutch-auction' ), 'class' => 'ended' ],\n    'stopped'    => [ 'label' => __( 'STOPPED', 'kloktion-dutch-auction' ), 'class' => 'stopped' ],\n];\n$badge = $badge_map[ $status ] ?? $badge_map['expired'];\n\n$hours   = floor( $time_left \/ 3600 );\n$minutes = floor( ( $time_left % 3600 ) \/ 60 );\n$seconds = $time_left % 60;\n?>\n\n<div class=\"kloktion-auction\"\n     data-product-id=\"<?php echo esc_attr( $product_id ); ?>\"\n     data-status=\"<?php echo esc_attr( $status ); ?>\">\n\n    <div class=\"kloktion-header\">\n        <span class=\"kloktion-badge kloktion-badge--<?php echo esc_attr( $badge['class'] ); ?>\">\n            <?php if ( 'active' === $status ) : ?><span class=\"kloktion-live-dot\"><\/span><?php endif; ?>\n            <?php echo esc_html( $badge['label'] ); ?>\n        <\/span>\n        <span class=\"kloktion-type-label\"><?php esc_html_e( 'Dutch Auction', 'kloktion-dutch-auction' ); ?><\/span>\n    <\/div>\n\n    <div class=\"kloktion-trust-badge\">\n        <span class=\"kloktion-trust-badge__icon\">\ud83d\udd12<\/span>\n        <span class=\"kloktion-trust-badge__text\"><?php esc_html_e( 'Secure Payment via Bank Fingerprint', 'kloktion-dutch-auction' ); ?><\/span>\n    <\/div>\n\n    <?php if ( $global_paused ) : ?>\n        <div class=\"kloktion-global-pause-notice\">\n            <?php esc_html_e( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ); ?>\n        <\/div>\n    <?php endif; ?>\n\n    <?php if ( in_array( $status, [ 'active', 'paused' ], true ) ) : ?>\n        <div class=\"kloktion-price-display\">\n            <div class=\"kloktion-price__current\" data-price=\"<?php echo esc_attr( $current_price ); ?>\">\n                <?php echo wp_kses_post( wc_price( $current_price ) ); ?>\n            <\/div>\n            <div class=\"kloktion-price__original\">\n                <?php printf( esc_html__( 'Starting price: %s', 'kloktion-dutch-auction' ), wp_kses_post( wc_price( $start_price ) ) ); ?>\n            <\/div>\n            <?php\n            $savings = $start_price - $current_price;\n            $pct     = $start_price > 0 ? round( ( $savings \/ $start_price ) * 100 ) : 0;\n            if ( $pct > 0 ) :\n            ?>\n                <div class=\"kloktion-savings\">\n                    <?php printf( esc_html__( 'Save %d%%', 'kloktion-dutch-auction' ), $pct ); ?>\n                <\/div>\n            <?php endif; ?>\n        <\/div>\n\n        <div class=\"kloktion-progress\">\n            <div class=\"kloktion-progress__bar\">\n                <div class=\"kloktion-progress__fill\" style=\"width:<?php echo esc_attr( round( $progress * 100, 1 ) ); ?>%\"><\/div>\n            <\/div>\n            <div class=\"kloktion-progress__labels\">\n                <span><?php echo wp_kses_post( wc_price( $start_price ) ); ?><\/span>\n                <span><?php echo $has_reserve ? wp_kses_post( wc_price( $reserve_price ) ) : esc_html__( 'No Reserve', 'kloktion-dutch-auction' ); ?><\/span>\n            <\/div>\n        <\/div>\n\n        <div class=\"kloktion-timer\">\n            <div class=\"kloktion-timer__label\">\n                <?php echo 'paused' === $status\n                    ? esc_html__( 'Last chance expires in:', 'kloktion-dutch-auction' )\n                    : esc_html__( 'Time remaining:', 'kloktion-dutch-auction' ); ?>\n            <\/div>\n            <div class=\"kloktion-timer__digits\" data-seconds=\"<?php echo esc_attr( $time_left ); ?>\">\n                <span class=\"kloktion-timer__unit\" data-unit=\"hours\"><?php printf( '%02d', $hours ); ?><\/span>\n                <span class=\"kloktion-timer__sep\">:<\/span>\n                <span class=\"kloktion-timer__unit\" data-unit=\"minutes\"><?php printf( '%02d', $minutes ); ?><\/span>\n                <span class=\"kloktion-timer__sep\">:<\/span>\n                <span class=\"kloktion-timer__unit\" data-unit=\"seconds\"><?php printf( '%02d', $seconds ); ?><\/span>\n            <\/div>\n        <\/div>\n\n    <?php elseif ( 'scheduled' === $status ) : ?>\n        <div class=\"kloktion-price-display\">\n            <div class=\"kloktion-price__current\">\n                <?php echo wp_kses_post( wc_price( $start_price ) ); ?>\n            <\/div>\n            <div class=\"kloktion-scheduled-note\">\n                <?php esc_html_e( 'Price will start dropping when the auction begins.', 'kloktion-dutch-auction' ); ?>\n            <\/div>\n        <\/div>\n        <div class=\"kloktion-timer\">\n            <div class=\"kloktion-timer__label\"><?php esc_html_e( 'Starts in:', 'kloktion-dutch-auction' ); ?><\/div>\n            <div class=\"kloktion-timer__digits\" data-seconds=\"<?php echo esc_attr( $time_left ); ?>\">\n                <span class=\"kloktion-timer__unit\" data-unit=\"hours\"><?php printf( '%02d', $hours ); ?><\/span>\n                <span class=\"kloktion-timer__sep\">:<\/span>\n                <span class=\"kloktion-timer__unit\" data-unit=\"minutes\"><?php printf( '%02d', $minutes ); ?><\/span>\n                <span class=\"kloktion-timer__sep\">:<\/span>\n                <span class=\"kloktion-timer__unit\" data-unit=\"seconds\"><?php printf( '%02d', $seconds ); ?><\/span>\n            <\/div>\n        <\/div>\n\n    <?php elseif ( 'pending_purchase' === $status ) : ?>\n        <div class=\"kloktion-price-display\">\n            <div class=\"kloktion-price__current\" data-price=\"<?php echo esc_attr( $current_price ); ?>\">\n                <?php echo wp_kses_post( wc_price( $current_price ) ); ?>\n            <\/div>\n            <div class=\"kloktion-price__original\">\n                <?php printf( esc_html__( 'Starting price: %s', 'kloktion-dutch-auction' ), wp_kses_post( wc_price( $start_price ) ) ); ?>\n            <\/div>\n            <div class=\"kloktion-scheduled-note\">\n                <?php esc_html_e( 'This lot is reserved. The buyer has 96 hours to complete payment.', 'kloktion-dutch-auction' ); ?>\n            <\/div>\n        <\/div>\n        <div class=\"kloktion-timer\">\n            <div class=\"kloktion-timer__label\"><?php esc_html_e( 'Payment window:', 'kloktion-dutch-auction' ); ?><\/div>\n            <div class=\"kloktion-timer__digits\" data-seconds=\"<?php echo esc_attr( $time_left ); ?>\">\n                <span class=\"kloktion-timer__unit\" data-unit=\"hours\"><?php printf( '%02d', $hours ); ?><\/span>\n                <span class=\"kloktion-timer__sep\">:<\/span>\n                <span class=\"kloktion-timer__unit\" data-unit=\"minutes\"><?php printf( '%02d', $minutes ); ?><\/span>\n                <span class=\"kloktion-timer__sep\">:<\/span>\n                <span class=\"kloktion-timer__unit\" data-unit=\"seconds\"><?php printf( '%02d', $seconds ); ?><\/span>\n            <\/div>\n        <\/div>\n\n    <?php elseif ( 'sold' === $status ) : ?>\n        <?php $sold_price = (float) get_post_meta( $product_id, '_kloktion_sold_price', true ); ?>\n        <div class=\"kloktion-price-display kloktion-price-display--sold\">\n            <div class=\"kloktion-price__current\"><?php echo wp_kses_post( wc_price( $sold_price ) ); ?><\/div>\n            <div class=\"kloktion-price__original\"><?php printf( esc_html__( 'Starting price: %s', 'kloktion-dutch-auction' ), wp_kses_post( wc_price( $start_price ) ) ); ?><\/div>\n            <div class=\"kloktion-sold-note\"><?php esc_html_e( 'This item has been sold.', 'kloktion-dutch-auction' ); ?><\/div>\n        <\/div>\n\n    \/* #212 Race-to-Pay scrapped per client 2026-04-14\n    <?php elseif ( 'processing' === $status ) : ?>\n        <?php\n        $processing_since = (int) get_post_meta( $product_id, '_kloktion_processing_since', true );\n        $processing_timeout = isset( $kloktion_settings['processing_timeout'] ) ? (int) $kloktion_settings['processing_timeout'] : 300;\n        $remaining_secs = $processing_since > 0 ? max( 0, ( $processing_since + $processing_timeout ) - time() ) : 0;\n        $remaining_mins = $remaining_secs > 0 ? ceil( $remaining_secs \/ 60 ) : 0;\n        ?>\n        <div class=\"kloktion-price-display\">\n            <div class=\"kloktion-price__current\" data-price=\"<?php echo esc_attr( $current_price ); ?>\">\n                <?php echo wp_kses_post( wc_price( $current_price ) ); ?>\n            <\/div>\n            <div class=\"kloktion-price__original\">\n                <?php printf( esc_html__( 'Starting price: %s', 'kloktion-dutch-auction' ), wp_kses_post( wc_price( $start_price ) ) ); ?>\n            <\/div>\n        <\/div>\n        <div class=\"kloktion-processing-notice kloktion-processing-notice--race\" style=\"background:#fff3cd;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:12px 0;font-size:13px;color:#856404;\">\n            <?php if ( $remaining_mins > 0 ) : ?>\n                &#9201; <?php printf(\n                    esc_html__( 'Another buyer is currently checking out. This auction will be available again in %d minute(s) if they don\\'t complete payment.', 'kloktion-dutch-auction' ),\n                    $remaining_mins\n                ); ?>\n            #212 end *\/\n\n    <?php else : ?>\n                &#9201; <?php esc_html_e( 'Another buyer is currently completing checkout. This auction will be available again if payment is not confirmed.', 'kloktion-dutch-auction' ); ?>\n            <?php endif; ?>\n        <\/div>\n        <style>.single-product .kloktion-btn--disabled,.single-product .kloktion-buy-now.kloktion-btn--disabled{opacity:.5;pointer-events:none;cursor:not-allowed;}<\/style>\n\n    <?php else : ?>\n        <div class=\"kloktion-ended\">\n            <p><?php esc_html_e( 'This auction has ended.', 'kloktion-dutch-auction' ); ?><\/p>\n        <\/div>\n    <?php endif; ?>\n<\/div>\n"},"result":null}
{"timestamp":"2026-05-09 20:13:39","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-05-09 20:13:39","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php"},"result":null}
{"timestamp":"2026-05-09 20:13:39","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js"},"result":null}
{"timestamp":"2026-05-09 20:13:39","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-09 20:14:04","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["INSERT INTO mod494_usermeta (user_id, meta_key, meta_value) SELECT ID, \\\"dokan_enable_selling\\\", \\\"yes\\\" FROM mod494_users u INNER JOIN mod494_usermeta cap ON cap.user_id = u.ID AND cap.meta_key = \\\"mod494_capabilities\\\" WHERE cap.meta_value LIKE \\\"%seller%\\\" AND NOT EXISTS (SELECT 1 FROM mod494_usermeta m WHERE m.user_id = u.ID AND m.meta_key = \\\"dokan_enable_selling\\\")"],"result":null}
{"timestamp":"2026-05-09 20:17:13","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"kloktion-fix-selling-20260509.php","content":"<?php\n$token = isset($_GET['token']) ? (string) $_GET['token'] : '';\n$expected = 'kloktion_v342_1778357832';\nif (!hash_equals($expected, $token)) {\n    http_response_code(403);\n    exit('Forbidden');\n}\nrequire __DIR__ . '\/wp-load.php';\nglobal $wpdb;\n$users = get_users(['role' => 'seller', 'fields' => 'ID']);\n$updated = [];\nforeach ($users as $user_id) {\n    $selling = get_user_meta((int) $user_id, 'dokan_enable_selling', true);\n    if ($selling === '') {\n        update_user_meta((int) $user_id, 'dokan_enable_selling', 'yes');\n        $updated[] = (int) $user_id;\n    }\n}\nheader('Content-Type: application\/json');\necho wp_json_encode(['ok' => true, 'updated' => $updated]);\n@unlink(__FILE__);\n"},"result":null}
{"timestamp":"2026-05-09 20:17:25","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT u.ID,u.user_login,cap.meta_value AS caps,sell.meta_value AS selling FROM mod494_users u LEFT JOIN mod494_usermeta cap ON cap.user_id=u.ID AND cap.meta_key=\\\"mod494_capabilities\\\" LEFT JOIN mod494_usermeta sell ON sell.user_id=u.ID AND sell.meta_key=\\\"dokan_enable_selling\\\" ORDER BY u.ID"],"result":null}
{"timestamp":"2026-05-09 20:17:38","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT u.ID,u.user_login,cap.meta_value AS caps,sell.meta_value AS selling FROM mod494_users u LEFT JOIN mod494_usermeta cap ON cap.user_id=u.ID AND cap.meta_key=\\\"mod494_capabilities\\\" LEFT JOIN mod494_usermeta sell ON sell.user_id=u.ID AND sell.meta_key=\\\"dokan_enable_selling\\\" ORDER BY u.ID"],"result":null}
{"timestamp":"2026-05-09 20:17:47","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID,user_login FROM mod494_users ORDER BY ID"],"result":null}
{"timestamp":"2026-05-09 20:17:47","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT user_id,meta_key,meta_value FROM mod494_usermeta WHERE meta_key LIKE \\\"%capabilities%\\\" OR meta_key=\\\"dokan_enable_selling\\\" LIMIT 30"],"result":null}
{"timestamp":"2026-05-09 20:17:53","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT umeta_id,user_id,meta_key,LEFT(meta_value,120) AS val FROM mod494_usermeta WHERE user_id=10 LIMIT 40"],"result":null}
{"timestamp":"2026-05-09 20:21:59","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-10 13:04:18","ip":"2a01:4f8:110:1444::2","action":"user_list","params":[],"result":null}
{"timestamp":"2026-05-10 13:04:58","ip":"2a01:4f8:110:1444::2","action":"wp_config_get","params":[],"result":null}
{"timestamp":"2026-05-10 13:05:02","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SHOW TABLES LIKE \"%users%\""],"result":null}
{"timestamp":"2026-05-11 11:41:01","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 11:41:22","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-11 11:41:23","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT post_title, post_status, post_type FROM wp_posts WHERE post_content LIKE \"%Pardon our dust%\" OR post_title LIKE \"%Pardon%\" LIMIT 5"],"result":null}
{"timestamp":"2026-05-11 11:41:34","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, LEFT(option_value, 200) AS preview FROM wp_options WHERE option_value LIKE \"%Pardon our dust%\" LIMIT 5"],"result":null}
{"timestamp":"2026-05-11 11:41:35","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_status FROM wp_posts WHERE post_name = \"dashboard\" OR post_name = \"new-product\" LIMIT 5"],"result":null}
{"timestamp":"2026-05-11 11:41:52","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 11:41:52","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_status, post_type FROM wp_posts WHERE (post_title LIKE \"%dust%\" OR post_title LIKE \"%amazing%\" OR post_content LIKE \"%Pardon%\") AND post_status IN (\"publish\",\"draft\",\"private\")"],"result":null}
{"timestamp":"2026-05-11 11:41:54","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["dokan_settings"],"result":null}
{"timestamp":"2026-05-11 11:42:08","ip":"2a01:4f8:110:1444::2","action":"theme_list","params":[],"result":null}
{"timestamp":"2026-05-11 11:42:09","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/themes\/"},"result":null}
{"timestamp":"2026-05-11 11:42:10","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, LEFT(option_value, 300) FROM wp_options WHERE option_name LIKE \"dokan_%\" OR option_name = \"page_on_front\" OR option_name = \"show_on_front\" LIMIT 10"],"result":null}
{"timestamp":"2026-05-11 11:42:20","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT p.ID, p.post_title, p.post_type, p.post_status FROM wp_posts p JOIN wp_postmeta pm ON pm.post_id = p.ID WHERE pm.meta_key = \"_elementor_data\" AND pm.meta_value LIKE \"%Pardon%\" LIMIT 10"],"result":null}
{"timestamp":"2026-05-11 11:45:16","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        if (buyBtn) {\n            buyBtn.addEventListener('click', function(e) {\n                e.preventDefault();\n                fireBuy();\n            });\n        }\n    });\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n"},"result":null}
{"timestamp":"2026-05-11 11:45:16","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-11 11:45:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.3\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.3' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-11 11:45:18","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Shows a \"Launching soon\" holding page to non-authorized visitors.\n * Version:     1.1.0\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', 'kloktion_coming_soon_gate', 1 );\n\nfunction kloktion_coming_soon_gate() {\n    \/\/ Never block the WP login\/admin area.\n    if ( is_admin() || ( defined( 'DOING_AJAX' ) && DOING_AJAX ) ) {\n        return;\n    }\n\n    \/\/ Never block cron or REST heartbeat.\n    if ( defined( 'DOING_CRON' ) && DOING_CRON ) {\n        return;\n    }\n\n    \/\/ Check if current user is allowed through.\n    if ( kloktion_coming_soon_is_allowed() ) {\n        return;\n    }\n\n    \/\/ Show coming-soon page and stop.\n    status_header( 503 );\n    nocache_headers();\n    header( 'Retry-After: 86400' );\n\n    echo '<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Launching soon - Kloktion<\/title>\n<style>\n  body { margin: 0; font-family: sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; background: #f4f4f4; }\n  .box { text-align: center; padding: 3rem 2rem; }\n  h1 { font-size: 2rem; color: #5d2da3; margin-bottom: 1rem; }\n  p { color: #555; font-size: 1.1rem; }\n<\/style>\n<\/head>\n<body>\n  <div class=\"box\">\n    <h1>Launching soon<\/h1>\n    <p>We are putting the finishing touches on Kloktion. Check back shortly.<\/p>\n  <\/div>\n<\/body>\n<\/html>';\n    exit;\n}\n\n\/**\n * Returns true when the current request \/ user should bypass the coming-soon gate.\n *\n * Bypass conditions (in order of evaluation):\n *  1. User is an admin (has manage_options capability).\n *  2. User is an editor or author (has edit_posts capability) - legacy bypass.\n *  3. User has the Dokan \"seller\" role.\n *  4. Logged-in user is accessing the Dokan vendor dashboard (\/dashboard\/*) -\n *     safety net for sellers whose role flag has not been fully set yet.\n *  5. (Optional) Dokan customers accessing buyer flow - uncomment if needed:\n *     \/\/ if ( is_user_logged_in() && current_user_can( 'read' ) ) { return true; }\n *\/\nfunction kloktion_coming_soon_is_allowed() {\n    \/\/ 1. Admins.\n    if ( current_user_can( 'manage_options' ) ) {\n        return true;\n    }\n\n    \/\/ 2. Editors \/ authors (edit_posts) - original bypass kept for back-compat.\n    if ( current_user_can( 'edit_posts' ) ) {\n        return true;\n    }\n\n    \/\/ 3. Dokan vendors: role \"seller\".\n    if ( is_user_logged_in() ) {\n        $user = wp_get_current_user();\n        if ( in_array( 'seller', (array) $user->roles, true ) ) {\n            return true;\n        }\n    }\n\n    \/\/ 4. Logged-in user on the Dokan vendor dashboard path (\/dashboard\/*).\n    if ( is_user_logged_in() ) {\n        $request_uri = isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '';\n        \/\/ Strip query string and leading slash for comparison.\n        $path = ltrim( strtok( $request_uri, '?' ), '\/' );\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n        \/\/ Also handle when WordPress is installed in a subdirectory.\n        $home_path = ltrim( parse_url( home_url(), PHP_URL_PATH ), '\/' );\n        if ( $home_path ) {\n            $path = ltrim( substr( $path, strlen( $home_path ) ), '\/' );\n        }\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n    }\n\n    return false;\n}\n"},"result":null}
{"timestamp":"2026-05-11 11:45:18","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 11:45:19","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log"},"result":null}
{"timestamp":"2026-05-11 12:01:13","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-11 12:01:43","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Shows a \"Launching soon\" holding page to non-authorized visitors.\n * Version:     1.1.0\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', 'kloktion_coming_soon_gate', 1 );\n\nfunction kloktion_coming_soon_gate() {\n    \/\/ Never block the WP login\/admin area.\n    if ( is_admin() || ( defined( 'DOING_AJAX' ) && DOING_AJAX ) ) {\n        return;\n    }\n\n    \/\/ Never block cron or REST heartbeat.\n    if ( defined( 'DOING_CRON' ) && DOING_CRON ) {\n        return;\n    }\n\n    \/\/ Check if current user is allowed through.\n    if ( kloktion_coming_soon_is_allowed() ) {\n        return;\n    }\n\n    \/\/ Show coming-soon page and stop.\n    status_header( 503 );\n    nocache_headers();\n    header( 'Retry-After: 86400' );\n\n    echo '<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Launching soon - Kloktion<\/title>\n<style>\n  body { margin: 0; font-family: sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; background: #f4f4f4; }\n  .box { text-align: center; padding: 3rem 2rem; }\n  h1 { font-size: 2rem; color: #5d2da3; margin-bottom: 1rem; }\n  p { color: #555; font-size: 1.1rem; }\n<\/style>\n<\/head>\n<body>\n  <div class=\"box\">\n    <h1>Launching soon<\/h1>\n    <p>We are putting the finishing touches on Kloktion. Check back shortly.<\/p>\n  <\/div>\n<\/body>\n<\/html>';\n    exit;\n}\n\n\/**\n * Returns true when the current request \/ user should bypass the coming-soon gate.\n *\n * Bypass conditions (in order of evaluation):\n *  1. User is an admin (has manage_options capability).\n *  2. User is an editor or author (has edit_posts capability) - legacy bypass.\n *  3. User has the Dokan \"seller\" role.\n *  4. Logged-in user is accessing the Dokan vendor dashboard (\/dashboard\/*) -\n *     safety net for sellers whose role flag has not been fully set yet.\n *  5. (Optional) Dokan customers accessing buyer flow - uncomment if needed:\n *     \/\/ if ( is_user_logged_in() && current_user_can( 'read' ) ) { return true; }\n *\/\nfunction kloktion_coming_soon_is_allowed() {\n\t\/\/ 0. Whitelisted IPs (Hetzner WG public IP, internal team). Bypass for any visitor on these IPs even if logged out.\n\t$whitelisted_ips = array(\n\t\t'78.46.49.27',  \/\/ Hetzner public IP - team wireguard VPN exit\n\t);\n\t$client_ip = '';\n\tif ( ! empty( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) {\n\t\t$client_ip = trim( $_SERVER['HTTP_CF_CONNECTING_IP'] );\n\t} elseif ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {\n\t\t$parts = explode( ',', $_SERVER['HTTP_X_FORWARDED_FOR'] );\n\t\t$client_ip = trim( $parts[0] );\n\t} elseif ( ! empty( $_SERVER['REMOTE_ADDR'] ) ) {\n\t\t$client_ip = trim( $_SERVER['REMOTE_ADDR'] );\n\t}\n\tif ( $client_ip && in_array( $client_ip, $whitelisted_ips, true ) ) {\n\t\treturn true;\n\t}\n\n\t\/\/ 1. Admins.\n    if ( current_user_can( 'manage_options' ) ) {\n        return true;\n    }\n\n    \/\/ 2. Editors \/ authors (edit_posts) - original bypass kept for back-compat.\n    if ( current_user_can( 'edit_posts' ) ) {\n        return true;\n    }\n\n    \/\/ 3. Dokan vendors: role \"seller\".\n    if ( is_user_logged_in() ) {\n        $user = wp_get_current_user();\n        if ( in_array( 'seller', (array) $user->roles, true ) ) {\n            return true;\n        }\n    }\n\n    \/\/ 4. Logged-in user on the Dokan vendor dashboard path (\/dashboard\/*).\n    if ( is_user_logged_in() ) {\n        $request_uri = isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '';\n        \/\/ Strip query string and leading slash for comparison.\n        $path = ltrim( strtok( $request_uri, '?' ), '\/' );\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n        \/\/ Also handle when WordPress is installed in a subdirectory.\n        $home_path = ltrim( parse_url( home_url(), PHP_URL_PATH ), '\/' );\n        if ( $home_path ) {\n            $path = ltrim( substr( $path, strlen( $home_path ) ), '\/' );\n        }\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n    }\n\n    return false;\n}\n"},"result":null}
{"timestamp":"2026-05-11 12:01:44","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 12:02:06","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-11 12:02:07","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/_ipdebug.php","content":"<?php echo \"IP=\".(\\[\"HTTP_CF_CONNECTING_IP\"]??\\[\"HTTP_X_FORWARDED_FOR\"]??\\[\"REMOTE_ADDR\"]).\"\n\";"},"result":null}
{"timestamp":"2026-05-11 12:02:07","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/_ipdebug.php","content":""},"result":null}
{"timestamp":"2026-05-11 12:02:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Shows a \"Launching soon\" holding page to non-authorized visitors.\n * Version: 1.2.0\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', 'kloktion_coming_soon_gate', 1 );\n\nfunction kloktion_coming_soon_gate() {\n    \/\/ Never block the WP login\/admin area.\n    if ( is_admin() || ( defined( 'DOING_AJAX' ) && DOING_AJAX ) ) {\n        return;\n    }\n\n    \/\/ Never block cron or REST heartbeat.\n    if ( defined( 'DOING_CRON' ) && DOING_CRON ) {\n        return;\n    }\n\n    \/\/ Check if current user is allowed through.\n    if ( kloktion_coming_soon_is_allowed() ) {\n        return;\n    }\n\n    \/\/ Show coming-soon page and stop.\n    status_header( 503 );\n    nocache_headers();\n    header( 'Retry-After: 86400' );\n\n    echo '<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Launching soon - Kloktion<\/title>\n<style>\n  body { margin: 0; font-family: sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; background: #f4f4f4; }\n  .box { text-align: center; padding: 3rem 2rem; }\n  h1 { font-size: 2rem; color: #5d2da3; margin-bottom: 1rem; }\n  p { color: #555; font-size: 1.1rem; }\n<\/style>\n<\/head>\n<body>\n  <div class=\"box\">\n    <h1>Launching soon<\/h1>\n    <p>We are putting the finishing touches on Kloktion. Check back shortly.<\/p>\n  <\/div>\n<\/body>\n<\/html>';\n    exit;\n}\n\n\/**\n * Returns true when the current request \/ user should bypass the coming-soon gate.\n *\n * Bypass conditions (in order of evaluation):\n *  1. User is an admin (has manage_options capability).\n *  2. User is an editor or author (has edit_posts capability) - legacy bypass.\n *  3. User has the Dokan \"seller\" role.\n *  4. Logged-in user is accessing the Dokan vendor dashboard (\/dashboard\/*) -\n *     safety net for sellers whose role flag has not been fully set yet.\n *  5. (Optional) Dokan customers accessing buyer flow - uncomment if needed:\n *     \/\/ if ( is_user_logged_in() && current_user_can( 'read' ) ) { return true; }\n *\/\nfunction kloktion_coming_soon_is_allowed() {\n\t\/\/ 0. Whitelisted IPs (Hetzner WG public IP, internal team). Bypass for any visitor on these IPs even if logged out.\n\t$whitelisted_ips = array(\n\t\t'78.46.49.27',         \/\/ Hetzner public IPv4 - team wireguard VPN exit\n\t\t'2a01:4f8:110:1444::2', \/\/ Hetzner public IPv6\n\t);\n\t$client_ip = '';\n\tif ( ! empty( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) {\n\t\t$client_ip = trim( $_SERVER['HTTP_CF_CONNECTING_IP'] );\n\t} elseif ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {\n\t\t$parts = explode( ',', $_SERVER['HTTP_X_FORWARDED_FOR'] );\n\t\t$client_ip = trim( $parts[0] );\n\t} elseif ( ! empty( $_SERVER['REMOTE_ADDR'] ) ) {\n\t\t$client_ip = trim( $_SERVER['REMOTE_ADDR'] );\n\t}\n\tif ( $client_ip && in_array( $client_ip, $whitelisted_ips, true ) ) {\n\t\treturn true;\n\t}\n\n\t\/\/ 1. Admins.\n    if ( current_user_can( 'manage_options' ) ) {\n        return true;\n    }\n\n    \/\/ 2. Editors \/ authors (edit_posts) - original bypass kept for back-compat.\n    if ( current_user_can( 'edit_posts' ) ) {\n        return true;\n    }\n\n    \/\/ 3. Dokan vendors: role \"seller\".\n    if ( is_user_logged_in() ) {\n        $user = wp_get_current_user();\n        if ( in_array( 'seller', (array) $user->roles, true ) ) {\n            return true;\n        }\n    }\n\n    \/\/ 4. Logged-in user on the Dokan vendor dashboard path (\/dashboard\/*).\n    if ( is_user_logged_in() ) {\n        $request_uri = isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '';\n        \/\/ Strip query string and leading slash for comparison.\n        $path = ltrim( strtok( $request_uri, '?' ), '\/' );\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n        \/\/ Also handle when WordPress is installed in a subdirectory.\n        $home_path = ltrim( parse_url( home_url(), PHP_URL_PATH ), '\/' );\n        if ( $home_path ) {\n            $path = ltrim( substr( $path, strlen( $home_path ) ), '\/' );\n        }\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n    }\n\n    return false;\n}\n"},"result":null}
{"timestamp":"2026-05-11 12:02:46","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 12:27:44","ip":"2a01:4f8:110:1444::2","action":"plugin_deactivate","params":["kloktion-coming-soon.php"],"result":null}
{"timestamp":"2026-05-11 12:27:44","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 12:50:55","ip":"2a01:4f8:110:1444::2","action":"plugin_activate","params":["kloktion-coming-soon.php"],"result":null}
{"timestamp":"2026-05-11 12:50:56","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 12:50:57","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_status, post_type, post_name, LEFT(post_content, 200) AS content_preview FROM wp_posts WHERE post_name = \"dashboard\" LIMIT 3"],"result":null}
{"timestamp":"2026-05-11 12:50:58","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT pm.post_id, p.post_title, LEFT(pm.meta_value, 400) FROM wp_postmeta pm JOIN wp_posts p ON p.ID = pm.post_id WHERE pm.meta_key = \"_elementor_data\" AND pm.meta_value LIKE \"%Pardon%\" LIMIT 5"],"result":null}
{"timestamp":"2026-05-11 12:50:59","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["dokan_general"],"result":null}
{"timestamp":"2026-05-11 12:56:37","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SHOW TABLES LIKE \"%posts%\""],"result":null}
{"timestamp":"2026-05-11 12:56:37","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_status, post_type, post_name FROM wp_posts WHERE (post_name LIKE \"%dashboard%\" OR post_title LIKE \"%dashboard%\") AND post_status != \"trash\""],"result":null}
{"timestamp":"2026-05-11 12:56:38","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT TABLE_SCHEMA, TABLE_NAME, COLUMN_NAME FROM INFORMATION_SCHEMA.COLUMNS WHERE TABLE_SCHEMA = DATABASE() AND DATA_TYPE IN (\"text\",\"longtext\",\"mediumtext\") LIMIT 50"],"result":null}
{"timestamp":"2026-05-11 12:56:49","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_status, post_type, post_name FROM mod494_posts WHERE post_name LIKE \"%dashboard%\" AND post_status != \"trash\""],"result":null}
{"timestamp":"2026-05-11 12:56:49","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_type, post_name FROM mod494_posts WHERE post_content LIKE \"%Pardon%\" AND post_status != \"trash\""],"result":null}
{"timestamp":"2026-05-11 12:56:50","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT pm.post_id, p.post_title, p.post_type, p.post_name FROM mod494_postmeta pm JOIN mod494_posts p ON p.ID = pm.post_id WHERE pm.meta_key = \"_elementor_data\" AND pm.meta_value LIKE \"%Pardon%\""],"result":null}
{"timestamp":"2026-05-11 12:56:51","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT pm.post_id, p.post_title, pm.meta_key FROM mod494_postmeta pm JOIN mod494_posts p ON p.ID = pm.post_id WHERE pm.meta_value LIKE \"%Pardon%\" LIMIT 10"],"result":null}
{"timestamp":"2026-05-11 12:57:09","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_content, post_excerpt, post_status FROM mod494_posts WHERE ID = 12"],"result":null}
{"timestamp":"2026-05-11 12:57:10","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT meta_key, LEFT(meta_value, 500) AS val FROM mod494_postmeta WHERE post_id = 12"],"result":null}
{"timestamp":"2026-05-11 12:57:10","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, LEFT(option_value, 800) AS val FROM mod494_options WHERE option_name IN (\"dokan_pages\", \"dokan_general\", \"dokan_selling_options\", \"dokan_appearance\")"],"result":null}
{"timestamp":"2026-05-11 12:57:26","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, LEFT(option_value, 600) FROM mod494_options WHERE option_name LIKE \"%maintenance%\" OR option_name LIKE \"%elementor_maintenance%\" OR option_name LIKE \"elementor_pro_%\""],"result":null}
{"timestamp":"2026-05-11 12:57:27","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, post_title, post_type, post_name FROM mod494_posts WHERE post_type IN (\"elementor_library\",\"elementor_snippet\",\"e-floating-buttons\",\"e-landing-page\") AND post_status = \"publish\""],"result":null}
{"timestamp":"2026-05-11 12:57:27","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, LEFT(option_value, 400) FROM mod494_options WHERE option_name LIKE \"theme_mods_hello-elementor%\" OR option_name LIKE \"hello_elementor%\""],"result":null}
{"timestamp":"2026-05-11 12:57:39","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT p.ID, p.post_title, p.post_type, pm.meta_value AS template_type FROM mod494_posts p LEFT JOIN mod494_postmeta pm ON pm.post_id = p.ID AND pm.meta_key = \"_elementor_template_type\" WHERE p.post_type = \"elementor_library\" AND p.post_status = \"publish\""],"result":null}
{"timestamp":"2026-05-11 12:57:39","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT post_id, meta_key, LEFT(meta_value, 300) FROM mod494_postmeta WHERE meta_value LIKE \"%dust%\" OR meta_value LIKE \"%check back soon%\" LIMIT 10"],"result":null}
{"timestamp":"2026-05-11 12:57:40","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name FROM mod494_options WHERE option_value LIKE \"%Pardon%\" OR option_value LIKE \"%check back soon%\""],"result":null}
{"timestamp":"2026-05-11 12:58:03","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT u.ID, u.user_login, u.user_email, GROUP_CONCAT(DISTINCT um.meta_value) AS caps FROM mod494_users u JOIN mod494_usermeta um ON um.user_id = u.ID WHERE um.meta_key = \"mod494_capabilities\" AND (um.meta_value LIKE \"%seller%\" OR um.meta_value LIKE \"%administrator%\") GROUP BY u.ID LIMIT 10"],"result":null}
{"timestamp":"2026-05-11 12:58:03","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT ID, user_login, user_email FROM mod494_users WHERE user_login LIKE \"%nastya%\" OR user_login LIKE \"%qa%\" OR user_login LIKE \"%test%\" OR user_email LIKE \"%nastya%\""],"result":null}
{"timestamp":"2026-05-11 12:58:25","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT meta_key, meta_value FROM mod494_usermeta WHERE user_id = 10 AND (meta_key LIKE \"%dokan%\" OR meta_key LIKE \"%selling%\" OR meta_key LIKE \"mod494_capabilities\")"],"result":null}
{"timestamp":"2026-05-11 12:58:26","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT * FROM mod494_usermeta WHERE user_id = 10"],"result":null}
{"timestamp":"2026-05-11 12:58:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/_grep_pardon.php","content":"<?php\nheader(\"Content-Type: text\/plain\");\n$root = \"\/home\/kloktig\/www-new\/wp-content\";\n$dirs = [\"plugins\", \"themes\", \"mu-plugins\"];\n$found = [];\nforeach ($dirs as $d) {\n    $base = \"$root\/$d\";\n    if (!is_dir($base)) continue;\n    $it = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($base, RecursiveDirectoryIterator::SKIP_DOTS));\n    foreach ($it as $f) {\n        if (!$f->isFile()) continue;\n        $ext = strtolower($f->getExtension());\n        if (!in_array($ext, [\"php\",\"html\",\"js\",\"tpl\",\"twig\"])) continue;\n        if ($f->getSize() > 2000000) continue;\n        $c = @file_get_contents($f->getPathname());\n        if ($c === false) continue;\n        if (stripos($c, \"Pardon our dust\") !== false || stripos($c, \"check back soon\") !== false) {\n            $found[] = str_replace($root, \"\", $f->getPathname());\n        }\n    }\n}\necho \"Hits: \".count($found).\"\n\";\nforeach ($found as $h) echo $h.\"\n\";\n"},"result":null}
{"timestamp":"2026-05-11 12:58:52","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/_grep_pardon.php","content":""},"result":null}
{"timestamp":"2026-05-11 12:59:01","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, option_value FROM mod494_options WHERE option_name LIKE \"woocommerce_coming_soon%\" OR option_name LIKE \"woocommerce_store_pages_only%\" OR option_name LIKE \"woocommerce_private_link%\""],"result":null}
{"timestamp":"2026-05-11 12:59:17","ip":"2a01:4f8:110:1444::2","action":"option_update","params":["woocommerce_coming_soon","no"],"result":null}
{"timestamp":"2026-05-11 12:59:17","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT option_name, option_value FROM mod494_options WHERE option_name = \"woocommerce_coming_soon\""],"result":null}
{"timestamp":"2026-05-11 13:40:24","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-11 13:40:25","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-11 13:45:21","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Shows a \"Launching soon\" holding page to non-authorized visitors.\n * Version: 1.2.0\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', 'kloktion_coming_soon_gate', 1 );\n\nfunction kloktion_coming_soon_gate() {\n    \/\/ Never block the WP login\/admin area.\n    if ( is_admin() || ( defined( 'DOING_AJAX' ) && DOING_AJAX ) ) {\n        return;\n    }\n\n    \/\/ Never block cron or REST heartbeat.\n    if ( defined( 'DOING_CRON' ) && DOING_CRON ) {\n        return;\n    }\n\n    \/\/ Check if current user is allowed through.\n    if ( kloktion_coming_soon_is_allowed() ) {\n        return;\n    }\n\n    \/\/ Show coming-soon page and stop.\n    status_header( 503 );\n    nocache_headers();\n    header( 'Retry-After: 86400' );\n\n    echo '<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Launching soon - Kloktion<\/title>\n<style>\n  body { margin: 0; font-family: sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; background: #f4f4f4; }\n  .box { text-align: center; padding: 3rem 2rem; }\n  h1 { font-size: 2rem; color: #5d2da3; margin-bottom: 1rem; }\n  p { color: #555; font-size: 1.1rem; }\n<\/style>\n<\/head>\n<body>\n  <div class=\"box\">\n    <h1>Launching soon<\/h1>\n    <p>We are putting the finishing touches on Kloktion. Check back shortly.<\/p>\n  <\/div>\n<\/body>\n<\/html>';\n    exit;\n}\n\n\/**\n * Returns true when the current request \/ user should bypass the coming-soon gate.\n *\n * Bypass conditions (in order of evaluation):\n *  1. User is an admin (has manage_options capability).\n *  2. User is an editor or author (has edit_posts capability) - legacy bypass.\n *  3. User has the Dokan \"seller\" role.\n *  4. Logged-in user is accessing the Dokan vendor dashboard (\/dashboard\/*) -\n *     safety net for sellers whose role flag has not been fully set yet.\n *  5. (Optional) Dokan customers accessing buyer flow - uncomment if needed:\n *     \/\/ if ( is_user_logged_in() && current_user_can( 'read' ) ) { return true; }\n *\/\nfunction kloktion_coming_soon_is_allowed() {\n\t\/\/ 0. Whitelisted IPs (Hetzner WG public IP, internal team). Bypass for any visitor on these IPs even if logged out.\n\t$whitelisted_ips = array(\n\t\t'78.46.49.27', \/\/ Hetzner public IP - team wireguard VPN exit\n\t);\n\t$client_ip = '';\n\tif ( ! empty( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) {\n\t\t$client_ip = trim( $_SERVER['HTTP_CF_CONNECTING_IP'] );\n\t} elseif ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {\n\t\t$parts = explode( ',', $_SERVER['HTTP_X_FORWARDED_FOR'] );\n\t\t$client_ip = trim( $parts[0] );\n\t} elseif ( ! empty( $_SERVER['REMOTE_ADDR'] ) ) {\n\t\t$client_ip = trim( $_SERVER['REMOTE_ADDR'] );\n\t}\n\tif ( $client_ip && in_array( $client_ip, $whitelisted_ips, true ) ) {\n\t\treturn true;\n\t}\n\n\t\/\/ 1. Admins.\n    if ( current_user_can( 'manage_options' ) ) {\n        return true;\n    }\n\n    \/\/ 2. Editors \/ authors (edit_posts) - original bypass kept for back-compat.\n    if ( current_user_can( 'edit_posts' ) ) {\n        return true;\n    }\n\n    \/\/ 3. Dokan vendors: role \"seller\".\n    if ( is_user_logged_in() ) {\n        $user = wp_get_current_user();\n        if ( in_array( 'seller', (array) $user->roles, true ) ) {\n            return true;\n        }\n    }\n\n    \/\/ 4. Logged-in user on the Dokan vendor dashboard path (\/dashboard\/*).\n    if ( is_user_logged_in() ) {\n        $request_uri = isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '';\n        \/\/ Strip query string and leading slash for comparison.\n        $path = ltrim( strtok( $request_uri, '?' ), '\/' );\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n        \/\/ Also handle when WordPress is installed in a subdirectory.\n        $home_path = ltrim( parse_url( home_url(), PHP_URL_PATH ), '\/' );\n        if ( $home_path ) {\n            $path = ltrim( substr( $path, strlen( $home_path ) ), '\/' );\n        }\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n    }\n\n    return false;\n}\n"},"result":null}
{"timestamp":"2026-05-13 09:12:45","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-13 09:12:46","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log"},"result":null}
{"timestamp":"2026-05-14 13:10:52","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT u.ID, u.user_login, u.user_email, MAX(CASE WHEN um1.meta_key = \"mod494_capabilities\" THEN um1.meta_value END) AS caps, MAX(CASE WHEN um2.meta_key = \"dokan_enable_selling\" THEN um2.meta_value END) AS dokan_enable FROM mod494_users u LEFT JOIN mod494_usermeta um1 ON um1.user_id = u.ID AND um1.meta_key = \"mod494_capabilities\" LEFT JOIN mod494_usermeta um2 ON um2.user_id = u.ID AND um2.meta_key = \"dokan_enable_selling\" GROUP BY u.ID, u.user_login, u.user_email ORDER BY u.ID"],"result":null}
{"timestamp":"2026-05-14 13:14:33","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/_enable_emil.php","content":"<?php\nrequire_once \"\/home\/kloktig\/www-new\/wp-load.php\";\n$user_id = 1;\n$prev = get_user_meta($user_id, \"dokan_enable_selling\", true);\nupdate_user_meta($user_id, \"dokan_enable_selling\", \"yes\");\n$now = get_user_meta($user_id, \"dokan_enable_selling\", true);\necho \"user=\".$user_id.\" prev=\".var_export($prev, true).\" now=\".$now;\n"},"result":null}
{"timestamp":"2026-05-14 13:14:34","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/_enable_emil.php","content":""},"result":null}
{"timestamp":"2026-05-14 13:14:35","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT user_id, meta_key, meta_value FROM mod494_usermeta WHERE user_id = 1 AND meta_key = \"dokan_enable_selling\""],"result":null}
{"timestamp":"2026-05-14 13:16:17","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__instruction {\n    display: block;\n    margin-bottom: 8px;\n    font-size: 14px;\n    font-weight: 600;\n    color: #333;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click--active .kloktion-one-click__track {\n    background: rgba(93, 45, 163, 0.12);\n}\n\n.kloktion-one-click--active .kloktion-one-click__label {\n    color: #5d2da3;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n.kloktion-one-click__buy {\n    display: block;\n    width: 100%;\n    margin-top: 18px;\n}\n\n.kloktion-one-click__buy[hidden] {\n    display: none !important;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"},"result":null}
{"timestamp":"2026-05-14 13:16:18","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Dokan {\n\n    public static function init(): void {\n        if ( ! class_exists( 'WeDevs_Dokan' ) ) {\n            return;\n        }\n\n        add_action( 'dokan_new_product_after_product_tags', [ __CLASS__, 'vendor_product_fields' ] );\n        add_action( 'dokan_product_edit_after_product_tags', [ __CLASS__, 'vendor_product_fields' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'save_post_product', [ __CLASS__, 'force_auction_product_type' ], 999, 1 );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_dashboard_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'load_dashboard_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_payouts_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_payouts_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'render_payouts_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_exit_dashboard_nav' ], 99 );\n\n        \/\/ Dokan blocks vendor's own products; allow dutch_auction\n        add_filter( 'woocommerce_is_purchasable', [ __CLASS__, 'allow_dutch_auction_purchase' ], 20, 2 );\n\n        \/\/ Dokan Lite hardcodes product_type='simple' in Products listing; include dutch_auction.\n        add_filter( 'dokan_product_types', [ __CLASS__, 'register_product_type' ] );\n        add_filter( 'dokan_product_listing_arg', [ __CLASS__, 'include_auctions_in_product_listing' ] );\n        add_action( 'init', [ __CLASS__, 'ensure_current_seller_enabled' ], 20 );\n    }\n\n    public static function vendor_product_fields( $post_id = null, $product = null ): void {\n        $product_id = 0;\n        if ( $product instanceof \\WC_Product ) {\n            $product_id = $product->get_id();\n        } elseif ( is_numeric( $post_id ) ) {\n            $product_id = (int) $post_id;\n        }\n\n        $start_price   = $product_id ? get_post_meta( $product_id, '_kloktion_start_price', true ) : '';\n        $reserve_price = $product_id ? get_post_meta( $product_id, '_kloktion_reserve_price', true ) : '';\n        $duration      = $product_id ? get_post_meta( $product_id, '_kloktion_duration', true ) : '';\n        $status        = $product_id ? Auction_Engine::get_status( $product_id ) : '';\n        $terms         = $product_id ? wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] ) : [];\n        $is_auction    = ! $product_id || in_array( 'dutch_auction', $terms, true );\n\n        \/\/ Lock auction fields once the auction has started (any non-empty, non-draft status).\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        $is_locked       = $product_id && in_array( $status, $locked_statuses, true );\n\n        \/\/ Render pending_review notice before the template.\n        if ( 'pending_review' === $status ) {\n            echo '<div style=\"background:#fff8e1;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#7a5800;\">'\n                . '&#9203; ' . esc_html__( 'Your update is pending admin approval. You\\'ll be notified by email once reviewed.', 'kloktion-dutch-auction' )\n                . '<\/div>';\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/product-fields.php';\n    }\n\n    \/**\n     * Intercept vendor product updates for moderation before save_vendor_product runs.\n     * Runs at priority 5, before save_vendor_product at priority 10.\n     *\n     * If moderation is enabled and the auction is in 'stopped' or 'pending_review' state,\n     * capture submitted data, queue it for review, set status to pending_review, and\n     * unhook save_vendor_product so it cannot overwrite the fields.\n     *\/\n    public static function intercept_vendor_update_for_moderation( $product_id, $data ): void {\n        global $wpdb;\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] intercept_vendor_update_for_moderation: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( empty( $settings['moderation_enabled'] ) ) {\n            return;\n        }\n\n        $current_status = get_post_meta( $product_id, '_kloktion_status', true );\n\n        \/\/ Allow new products (empty _kloktion_status) only if this is a Dutch Auction.\n        \/\/ For existing products, only intercept when in 'stopped' or 'pending_review' state.\n        $is_new_product = ( '' === $current_status || false === $current_status );\n        if ( $is_new_product ) {\n            \/\/ Detect if this is a Dutch Auction submission before deciding to intercept.\n            $is_auction_signal = ! empty( $_POST['_kloktion_is_auction'] )\n                || ! empty( $data['_kloktion_is_auction'] )\n                || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n                || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n                || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n            if ( ! $is_auction_signal ) {\n                return; \/\/ Non-auction new product \u2014 skip.\n            }\n        } elseif ( ! in_array( $current_status, [ 'stopped', 'pending_review' ], true ) ) {\n            return; \/\/ Existing product not in a moderation-eligible state.\n        }\n\n        \/\/ Capture only our plugin fields from $data.\n        $kloktion_data = [];\n        foreach ( (array) $data as $key => $value ) {\n            if ( 0 === strpos( $key, '_kloktion_' ) ) {\n                $kloktion_data[ $key ] = $value;\n            }\n        }\n\n        \/\/ Upsert: if a pending row already exists for this product, reset it rather than duplicating.\n        $wpdb->query( $wpdb->prepare(\n            \"INSERT INTO {$wpdb->prefix}kloktion_moderation_queue\n             (product_id, vendor_id, submitted_data, submitted_at, status)\n             VALUES (%d, %d, %s, %s, 'pending')\n             ON DUPLICATE KEY UPDATE\n                vendor_id        = VALUES(vendor_id),\n                submitted_data   = VALUES(submitted_data),\n                submitted_at     = VALUES(submitted_at),\n                status           = 'pending',\n                reviewed_by      = NULL,\n                reviewed_at      = NULL,\n                rejection_reason = NULL\",\n            (int) $product_id,\n            (int) get_current_user_id(),\n            wp_json_encode( $kloktion_data ),\n            current_time( 'mysql' )\n        ) );\n\n        do_action( 'kloktion_moderation_submitted', $product_id, $data );\n\n        \/\/ CRITICAL: Persist auction meta + term BEFORE unhooking save_vendor_product.\n        \/\/ Otherwise Dokan's own save resets product_type to 'simple' and auction data is lost.\n        \/\/ Robust detection: accept checkbox, price field, or product_type signal.\n        $intercept_is_auction = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] )\n            || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n            || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n            || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n        if ( $intercept_is_auction ) {\n            \/\/ Force dutch_auction product type term.\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n            \/\/ Persist auction meta from $data (or $_POST fallback).\n            $meta_map = [\n                '_kloktion_is_auction',\n                '_kloktion_start_price',\n                '_kloktion_reserve_price',\n                '_kloktion_duration',\n                '_kloktion_start_date',\n                '_kloktion_start_time',\n                '_kloktion_start_timestamp',\n                '_kloktion_decay_curve',\n            ];\n            foreach ( $meta_map as $key ) {\n                $value = null;\n                if ( isset( $data[ $key ] ) ) {\n                    $value = $data[ $key ];\n                } elseif ( isset( $_POST[ $key ] ) ) {\n                    $value = wp_unslash( $_POST[ $key ] );\n                }\n                if ( $value !== null && $value !== '' ) {\n                    if ( in_array( $key, [ '_kloktion_start_price', '_kloktion_reserve_price' ], true ) ) {\n                        update_post_meta( $product_id, $key, (float) $value );\n                    } elseif ( in_array( $key, [ '_kloktion_duration', '_kloktion_start_timestamp' ], true ) ) {\n                        update_post_meta( $product_id, $key, absint( $value ) );\n                    } else {\n                        update_post_meta( $product_id, $key, sanitize_text_field( $value ) );\n                    }\n                }\n            }\n\n            \/\/ Ensure _kloktion_is_auction flag persists (used by force_auction_product_type detection).\n            update_post_meta( $product_id, '_kloktion_is_auction', '1' );\n\n            \/\/ Compute end_time if we have start_time + duration.\n            $start_ts = (int) get_post_meta( $product_id, '_kloktion_start_timestamp', true );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $start_ts > 0 && $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_ts + $duration );\n            }\n        }\n\n        \/\/ Mark as pending_review AFTER meta is saved.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Unhook save_vendor_product so it doesn't overwrite the pending_review state.\n        remove_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10 );\n        remove_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10 );\n    }\n\n    public static function save_vendor_product( $product_id, $data ): void {\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] save_vendor_product: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        \/\/ Robust auction detection: accept any of these signals\n        \/\/ (Dokan may strip or rename fields; presence of price\/type fields is enough).\n        $is_auction_posted = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] );\n\n        $has_auction_price = isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price']\n            || isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'];\n\n        \/\/ Check product_type field in POST (Dokan sends this as 'product_type' or inside $data)\n        $posted_type = $_POST['product_type'] ?? ( $data['product_type'] ?? '' );\n        $type_is_auction = ( 'dutch_auction' === $posted_type );\n\n        \/\/ Also accept if the existing term is already dutch_auction (locked auction re-save)\n        $existing_terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        $has_auction_term = ! is_wp_error( $existing_terms ) && in_array( 'dutch_auction', (array) $existing_terms, true );\n\n        $is_auction = $is_auction_posted || $has_auction_price || $type_is_auction || $has_auction_term;\n\n        if ( ! $is_auction ) {\n            return;\n        }\n\n        wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n        \/\/ If the auction has already started, vendors cannot change core auction fields.\n        $current_status  = get_post_meta( $product_id, '_kloktion_status', true );\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        if ( in_array( $current_status, $locked_statuses, true ) ) {\n            return; \/\/ Auction fields are locked; title\/description\/images handled by Dokan core.\n        }\n\n        $start_price   = isset( $_POST['_kloktion_start_price'] ) ? (float) sanitize_text_field( $_POST['_kloktion_start_price'] ) : ( isset( $data['_kloktion_start_price'] ) ? (float) $data['_kloktion_start_price'] : 0 );\n        $no_reserve    = ! empty( $_POST['_kloktion_no_reserve'] ) || ! empty( $data['_kloktion_no_reserve'] );\n        $reserve_price = $no_reserve ? 0 : ( isset( $_POST['_kloktion_reserve_price'] ) ? (float) sanitize_text_field( $_POST['_kloktion_reserve_price'] ) : ( isset( $data['_kloktion_reserve_price'] ) ? (float) $data['_kloktion_reserve_price'] : 0 ) );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : ( isset( $data['_kloktion_duration'] ) ? absint( $data['_kloktion_duration'] ) : 86400 );\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n\n        update_post_meta( $product_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $product_id, '_kloktion_duration', $duration );\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        if ( ! $status ) {\n            $now = time();\n            update_post_meta( $product_id, '_kloktion_status', 'active' );\n            update_post_meta( $product_id, '_kloktion_start_time', $now );\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n            Logger::log( $product_id, 'active', $start_price, get_current_user_id() );\n        }\n    }\n\n    \/**\n     * Dokan sometimes has seller-role users without the selling flag after manual\n     * account creation\/import. Enable only missing values; explicit \"no\" stays no.\n     *\/\n    public static function ensure_current_seller_enabled(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        $roles = (array) $user->roles;\n        if ( ! $user || ( ! in_array( 'seller', $roles, true ) && ! in_array( 'administrator', $roles, true ) ) ) {\n            return;\n        }\n\n        $selling = get_user_meta( $user_id, 'dokan_enable_selling', true );\n        if ( '' === $selling ) {\n            update_user_meta( $user_id, 'dokan_enable_selling', 'yes' );\n        }\n    }\n\n    public static function add_dashboard_menu( $urls ): array {\n        $urls['kloktion-auctions'] = [\n            'title' => __( 'My Auctions', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-gavel\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-auctions' ),\n            'pos'   => 55,\n        ];\n\n        return $urls;\n    }\n\n    public static function register_query_var( $query_vars ): array {\n        $query_vars[] = 'kloktion-auctions';\n        return $query_vars;\n    }\n\n    public static function load_dashboard_template( $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-auctions'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/my-auctions.php';\n    }\n\n    \/**\n     * Register dutch_auction in Dokan's product type dropdown.\n     *\/\n    public static function register_product_type( array $types ): array {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    \/**\n     * Dokan Lite restricts Products listing to product_type='simple'.\n     * Modify the tax_query to also include 'dutch_auction'.\n     *\/\n    public static function include_auctions_in_product_listing( array $args ): array {\n        if ( empty( $args['tax_query'] ) || ! is_array( $args['tax_query'] ) ) {\n            return $args;\n        }\n\n        foreach ( $args['tax_query'] as &$clause ) {\n            if (\n                is_array( $clause )\n                && isset( $clause['taxonomy'], $clause['field'], $clause['terms'], $clause['operator'] )\n                && 'product_type' === $clause['taxonomy']\n                && 'slug' === $clause['field']\n                && 'IN' === $clause['operator']\n                && is_array( $clause['terms'] )\n                && in_array( 'simple', $clause['terms'], true )\n                && ! in_array( 'dutch_auction', $clause['terms'], true )\n            ) {\n                $clause['terms'][] = 'dutch_auction';\n            }\n        }\n        unset( $clause );\n\n        return $args;\n    }\n\n    public static function allow_dutch_auction_purchase( bool $purchasable, $product ): bool {\n        if ( ! $product instanceof Product_Type ) {\n            return $purchasable;\n        }\n        \/\/ If Dokan already marked it non-purchasable for own-product reason,\n        \/\/ re-check: guests should always be able to purchase, and\n        \/\/ non-author logged-in users should too.\n        if ( ! $purchasable && $product->get_status() === 'publish' ) {\n            $current_user = get_current_user_id();\n            if ( 0 === $current_user ) {\n                return true; \/\/ Guests can always see Add to Cart.\n            }\n            $author = absint( get_post_field( 'post_author', $product->get_id() ) );\n            if ( $author !== $current_user ) {\n                return true;\n            }\n        }\n        return $purchasable;\n    }\n\n    \/**\n     * Add \"Payouts\" menu item to Dokan vendor dashboard navigation.\n     *\/\n    public static function add_payouts_menu( array $urls ): array {\n        $urls['kloktion-payouts'] = [\n            'title' => __( 'Payouts', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-credit-card\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-payouts' ),\n            'pos'   => 60,\n        ];\n\n        return $urls;\n    }\n\n    \/**\n     * Register kloktion-payouts as a Dokan query var.\n     *\/\n    public static function register_payouts_query_var( array $query_vars ): array {\n        $query_vars[] = 'kloktion-payouts';\n        return $query_vars;\n    }\n\n    \/**\n     * Render the Payouts \/ Stripe Connect template in the vendor dashboard.\n     *\n     * Integration note for class-stripe-connect.php:\n     *   ajax_start_onboarding() must compute URLs as:\n     *     $return_url  = dokan_get_navigation_url('kloktion-payouts') . '?stripe_return=1';\n     *     $refresh_url = dokan_get_navigation_url('kloktion-payouts');\n     *   This ensures the vendor lands back on this page after Stripe onboarding.\n     *\/\n    public static function render_payouts_template( array $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-payouts'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        $account_id  = get_user_meta( $vendor_id, '_stripe_connect_account_id', true );\n        $status      = get_user_meta( $vendor_id, '_stripe_connect_status', true );\n        $onboarded_at = get_user_meta( $vendor_id, '_stripe_connect_onboarded_at', true );\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/payouts.php';\n    }\n\n    \/**\n     * Force dutch_auction product type after any save that might reset it to 'simple'.\n     * Runs late (priority 9999\/999) so Dokan's internal save cannot override.\n     * Detects auction products via existing term, POST flag, or auction meta (covers locked auctions too).\n     *\/\n    public static function force_auction_product_type( int $product_id ): void {\n        if ( $product_id <= 0 ) {\n            return;\n        }\n        \/\/ Avoid running during initial WP import\/cron saves\n        if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {\n            return;\n        }\n        \/\/ Skip revisions\n        if ( wp_is_post_revision( $product_id ) ) {\n            return;\n        }\n\n        $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        if ( is_wp_error( $terms ) ) {\n            return;\n        }\n\n        $has_auction_term = in_array( 'dutch_auction', (array) $terms, true );\n        $posted_auction   = ! empty( $_POST['_kloktion_is_auction'] );\n        $has_auction_meta = (bool) get_post_meta( $product_id, '_kloktion_start_price', true )\n                         || '1' === get_post_meta( $product_id, '_kloktion_is_auction', true );\n\n        $is_auction = $has_auction_term || $posted_auction || $has_auction_meta;\n\n        if ( $is_auction ) {\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n            clean_post_cache( $product_id );\n        }\n    }\n\n    \/**\n     * Add \"Browse Shop\" link to the Dokan vendor sidebar so vendors can exit the dashboard.\n     *\/\n    public static function add_exit_dashboard_nav( array $nav ): array {\n        $nav['kloktion-exit'] = [\n            'title'      => __( 'Browse Shop', 'kloktion-dutch-auction' ),\n            'icon'       => '<i class=\"fas fa-store\"><\/i>',\n            'url'        => site_url( '\/shop\/' ),\n            'pos'        => 200,\n            'permission' => 'dokan_view_overview_menu',\n        ];\n        return $nav;\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-14 13:16:18","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-14 13:16:19","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.4\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.4' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-14 13:16:19","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-14 13:16:20","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log"},"result":null}
{"timestamp":"2026-05-24 08:18:49","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-05-24 08:19:09","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.5\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.5' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"],"result":null}
{"timestamp":"2026-05-24 08:19:09","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.5\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.5' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:09","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","= 3.4.5 - 2026-05-24 =\n* UX: Stronger visual separation between the activation slider and Buy Now button - 28px margin + 24px padding + 1px divider line, with higher CSS specificity so theme button rules cannot override the gap.\n* Feature: WP-Admin \"Put back on sale\" control on stuck pending_purchase lots. Cancels the pending order, clears the 96h reservation, restarts the auction from the original start price and duration. Reason dropdown (penalty unpaid \/ seller request \/ admin decision) records intent in the order note and Logger entry.\n* Feature: Dokan vendor product form now blocks save when Dutch Auction Start Price is missing or zero. Visible WooCommerce error notice on the server side plus a JS hint that highlights the field and focuses it on submit.\n* Feature: Dokan vendor product form hides the standard WooCommerce Regular\/Sale price fields and the entire Inventory section. Dutch Auction lots are unique and their price is derived from _kloktion_start_price - the extra fields only confused vendors.\n* Security: Cloudflare Turnstile integration on the one-click buy flow. Widget renders between the slider track and the Buy Now button. Token is verified server-side via siteverify before any pending_purchase is created. Fail-closed once the secret is set; fail-open by default until the operator enables it via wp_option kloktion_turnstile_secret.\n* DX: Added DESIGN.md baseline (Google design.md spec) at the repo root to lock in tokens for future UI changes.\n\n= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"],"result":null}
{"timestamp":"2026-05-24 08:19:09","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","= 3.4.5 - 2026-05-24 =\n* UX: Stronger visual separation between the activation slider and Buy Now button - 28px margin + 24px padding + 1px divider line, with higher CSS specificity so theme button rules cannot override the gap.\n* Feature: WP-Admin \"Put back on sale\" control on stuck pending_purchase lots. Cancels the pending order, clears the 96h reservation, restarts the auction from the original start price and duration. Reason dropdown (penalty unpaid \/ seller request \/ admin decision) records intent in the order note and Logger entry.\n* Feature: Dokan vendor product form now blocks save when Dutch Auction Start Price is missing or zero. Visible WooCommerce error notice on the server side plus a JS hint that highlights the field and focuses it on submit.\n* Feature: Dokan vendor product form hides the standard WooCommerce Regular\/Sale price fields and the entire Inventory section. Dutch Auction lots are unique and their price is derived from _kloktion_start_price - the extra fields only confused vendors.\n* Security: Cloudflare Turnstile integration on the one-click buy flow. Widget renders between the slider track and the Buy Now button. Token is verified server-side via siteverify before any pending_purchase is created. Fail-closed once the secret is set; fail-open by default until the operator enables it via wp_option kloktion_turnstile_secret.\n* DX: Added DESIGN.md baseline (Google design.md spec) at the repo root to lock in tokens for future UI changes.\n\n= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:10","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__instruction {\n    display: block;\n    margin-bottom: 8px;\n    font-size: 14px;\n    font-weight: 600;\n    color: #333;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click--active .kloktion-one-click__track {\n    background: rgba(93, 45, 163, 0.12);\n}\n\n.kloktion-one-click--active .kloktion-one-click__label {\n    color: #5d2da3;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n\/* v3.4.5: stronger separation - higher specificity beats theme button rules *\/\nbody .kloktion-one-click .kloktion-one-click__buy,\nbody .kloktion-one-click__track + .kloktion-one-click__buy {\n    display: block !important;\n    width: 100% !important;\n    margin: 28px 0 0 0 !important;\n    padding-top: 24px;\n    border-top: 1px solid rgba(127, 127, 127, 0.25);\n    position: relative;\n}\n\n@media (max-width: 767px) {\n    body .kloktion-one-click .kloktion-one-click__buy,\n    body .kloktion-one-click__track + .kloktion-one-click__buy {\n        margin-top: 16px !important;\n        padding-top: 12px;\n    }\n}\n\nbody .kloktion-one-click .kloktion-one-click__buy[hidden],\n.kloktion-one-click__buy[hidden] {\n    display: none !important;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:10","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__instruction {\n    display: block;\n    margin-bottom: 8px;\n    font-size: 14px;\n    font-weight: 600;\n    color: #333;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click--active .kloktion-one-click__track {\n    background: rgba(93, 45, 163, 0.12);\n}\n\n.kloktion-one-click--active .kloktion-one-click__label {\n    color: #5d2da3;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n\/* v3.4.5: stronger separation - higher specificity beats theme button rules *\/\nbody .kloktion-one-click .kloktion-one-click__buy,\nbody .kloktion-one-click__track + .kloktion-one-click__buy {\n    display: block !important;\n    width: 100% !important;\n    margin: 28px 0 0 0 !important;\n    padding-top: 24px;\n    border-top: 1px solid rgba(127, 127, 127, 0.25);\n    position: relative;\n}\n\n@media (max-width: 767px) {\n    body .kloktion-one-click .kloktion-one-click__buy,\n    body .kloktion-one-click__track + .kloktion-one-click__buy {\n        margin-top: 16px !important;\n        padding-top: 12px;\n    }\n}\n\nbody .kloktion-one-click .kloktion-one-click__buy[hidden],\n.kloktion-one-click__buy[hidden] {\n    display: none !important;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:11","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    \/\/ R12: Cloudflare Turnstile token storage. Populated by the data-callback on widget success.\n    window.kloktionTurnstileToken = '';\n\n    \/\/ Detect Turnstile by DOM widget presence, not window.turnstile global (which may be missing when CF JS is blocked\/slow).\n    function isTurnstileExpected() {\n        return !! document.querySelector( '.cf-turnstile.kloktion-turnstile' );\n    }\n\n    window.kloktionTurnstileCallback = function( token ) {\n        window.kloktionTurnstileToken = token || '';\n        \/\/ FIX G: re-enable Buy buttons that were held pending token capture \u2014 with 500ms grace period\n        \/\/ so a finger still on the button after turnstile.reset() cannot fire a double-submit.\n        setTimeout( function() {\n            document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn) {\n                btn.removeAttribute('data-kloktion-await-turnstile');\n                if ( btn.dataset.kloktionPendingActive === '1' ) {\n                    btn.disabled = false;\n                    btn.setAttribute('aria-busy', 'false');\n                    if ( btn.dataset.kloktionOrigText ) {\n                        btn.textContent = btn.dataset.kloktionOrigText;\n                        delete btn.dataset.kloktionOrigText;\n                    }\n                }\n            });\n        }, 500 );\n    };\n\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n\n            \/\/ FIX G (v2): guard by DOM widget presence so blocked\/slow CF JS still hard-disables Buy.\n            if (active && buyBtn) {\n                if ( isTurnstileExpected() && ! window.kloktionTurnstileToken ) {\n                    buyBtn.disabled = true;\n                    buyBtn.setAttribute('aria-busy', 'true');\n                    buyBtn.dataset.kloktionPendingActive = '1';\n                    buyBtn.dataset.kloktionAwaitTurnstile = '1';\n                    buyBtn.dataset.kloktionOrigText = buyBtn.textContent;\n                    buyBtn.textContent = 'Verifying...';\n                } else {\n                    buyBtn.disabled = false;\n                    buyBtn.dataset.kloktionPendingActive = '0';\n                }\n            } else if (!active && buyBtn) {\n                \/\/ FIX G: deactivating \u2014 clear the await flags and restore text.\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n                buyBtn.removeAttribute('aria-busy');\n                if ( buyBtn.dataset.kloktionOrigText ) {\n                    buyBtn.textContent = buyBtn.dataset.kloktionOrigText;\n                    delete buyBtn.dataset.kloktionOrigText;\n                }\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            \/\/ B3: reset Turnstile and hold all visible Buy buttons in pending state until callback fires.\n            function resetTurnstileAndPause() {\n                if ( typeof window.turnstile !== 'undefined' && typeof window.turnstile.reset === 'function' ) {\n                    try { window.turnstile.reset(); } catch(e) {}\n                }\n                window.kloktionTurnstileToken = '';\n                if ( ! isTurnstileExpected() ) { return; }\n                \/\/ Put every visible Buy button back to pending state - callback will re-enable.\n                document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn){\n                    if ( btn.hidden ) { return; }\n                    btn.disabled = true;\n                    btn.setAttribute('aria-busy', 'true');\n                    btn.dataset.kloktionPendingActive = '1';\n                    btn.dataset.kloktionAwaitTurnstile = '1';\n                    if ( ! btn.dataset.kloktionOrigText ) {\n                        btn.dataset.kloktionOrigText = btn.textContent;\n                    }\n                    btn.textContent = 'Verifying...';\n                });\n            }\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n                fd.append('cf_turnstile_token', window.kloktionTurnstileToken || ''); \/\/ R12\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            \/\/ B3: token is single-use \u2014 reset Turnstile and hold button until new token arrives.\n                            resetTurnstileAndPause();\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        \/\/ B3: network failure \u2014 reset Turnstile and hold button until new token arrives.\n                        resetTurnstileAndPause();\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        \/\/ Expose fireBuy on the container element so the delegated click handler can reach it.\n        if ( root ) { root._kloktionFireBuy = fireBuy; }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        \/\/ Direct Buy binding removed \u2014 handled by delegated listener below so dynamically\n        \/\/ injected Buy buttons (AJAX cart updates, variation reloads) also work.\n    });\n\n    \/\/ FIX 4: Delegated click handler for .kloktion-one-click__buy.\n    \/\/ Covers buttons present at init AND any injected later (AJAX \/ variation reloads).\n    document.addEventListener('click', function(e) {\n        var btn = e.target && e.target.closest ? e.target.closest('.kloktion-one-click__buy') : null;\n        if ( ! btn ) { return; }\n        if ( btn.hidden || btn.disabled ) { return; }\n        e.preventDefault();\n        \/\/ Walk up to find the matching slider container and call its fireBuy.\n        \/\/ Each slider instance stores fireBuy on the container via data attr for delegation.\n        var container = btn.closest('.kloktion-one-click');\n        if ( container && typeof container._kloktionFireBuy === 'function' ) {\n            container._kloktionFireBuy();\n        }\n    }, false);\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n    \/\/ FIX 3: 12-second Turnstile timeout \u2014 if widget is in DOM but no token arrives, show inline error.\n    if ( isTurnstileExpected() ) {\n        setTimeout( function() {\n            if ( ! window.kloktionTurnstileToken ) {\n                document.querySelectorAll('.kloktion-one-click__buy').forEach( function(btn) {\n                    if ( btn.dataset.kloktionAwaitTurnstile === '1' ) {\n                        btn.textContent = 'Verification timed out. Reload page.';\n                        btn.setAttribute('aria-busy', 'false');\n                    }\n                } );\n            }\n        }, 12000 );\n    }\n\n})();\n"],"result":null}
{"timestamp":"2026-05-24 08:19:11","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    \/\/ R12: Cloudflare Turnstile token storage. Populated by the data-callback on widget success.\n    window.kloktionTurnstileToken = '';\n\n    \/\/ Detect Turnstile by DOM widget presence, not window.turnstile global (which may be missing when CF JS is blocked\/slow).\n    function isTurnstileExpected() {\n        return !! document.querySelector( '.cf-turnstile.kloktion-turnstile' );\n    }\n\n    window.kloktionTurnstileCallback = function( token ) {\n        window.kloktionTurnstileToken = token || '';\n        \/\/ FIX G: re-enable Buy buttons that were held pending token capture \u2014 with 500ms grace period\n        \/\/ so a finger still on the button after turnstile.reset() cannot fire a double-submit.\n        setTimeout( function() {\n            document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn) {\n                btn.removeAttribute('data-kloktion-await-turnstile');\n                if ( btn.dataset.kloktionPendingActive === '1' ) {\n                    btn.disabled = false;\n                    btn.setAttribute('aria-busy', 'false');\n                    if ( btn.dataset.kloktionOrigText ) {\n                        btn.textContent = btn.dataset.kloktionOrigText;\n                        delete btn.dataset.kloktionOrigText;\n                    }\n                }\n            });\n        }, 500 );\n    };\n\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n\n            \/\/ FIX G (v2): guard by DOM widget presence so blocked\/slow CF JS still hard-disables Buy.\n            if (active && buyBtn) {\n                if ( isTurnstileExpected() && ! window.kloktionTurnstileToken ) {\n                    buyBtn.disabled = true;\n                    buyBtn.setAttribute('aria-busy', 'true');\n                    buyBtn.dataset.kloktionPendingActive = '1';\n                    buyBtn.dataset.kloktionAwaitTurnstile = '1';\n                    buyBtn.dataset.kloktionOrigText = buyBtn.textContent;\n                    buyBtn.textContent = 'Verifying...';\n                } else {\n                    buyBtn.disabled = false;\n                    buyBtn.dataset.kloktionPendingActive = '0';\n                }\n            } else if (!active && buyBtn) {\n                \/\/ FIX G: deactivating \u2014 clear the await flags and restore text.\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n                buyBtn.removeAttribute('aria-busy');\n                if ( buyBtn.dataset.kloktionOrigText ) {\n                    buyBtn.textContent = buyBtn.dataset.kloktionOrigText;\n                    delete buyBtn.dataset.kloktionOrigText;\n                }\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            \/\/ B3: reset Turnstile and hold all visible Buy buttons in pending state until callback fires.\n            function resetTurnstileAndPause() {\n                if ( typeof window.turnstile !== 'undefined' && typeof window.turnstile.reset === 'function' ) {\n                    try { window.turnstile.reset(); } catch(e) {}\n                }\n                window.kloktionTurnstileToken = '';\n                if ( ! isTurnstileExpected() ) { return; }\n                \/\/ Put every visible Buy button back to pending state - callback will re-enable.\n                document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn){\n                    if ( btn.hidden ) { return; }\n                    btn.disabled = true;\n                    btn.setAttribute('aria-busy', 'true');\n                    btn.dataset.kloktionPendingActive = '1';\n                    btn.dataset.kloktionAwaitTurnstile = '1';\n                    if ( ! btn.dataset.kloktionOrigText ) {\n                        btn.dataset.kloktionOrigText = btn.textContent;\n                    }\n                    btn.textContent = 'Verifying...';\n                });\n            }\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n                fd.append('cf_turnstile_token', window.kloktionTurnstileToken || ''); \/\/ R12\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            \/\/ B3: token is single-use \u2014 reset Turnstile and hold button until new token arrives.\n                            resetTurnstileAndPause();\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        \/\/ B3: network failure \u2014 reset Turnstile and hold button until new token arrives.\n                        resetTurnstileAndPause();\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        \/\/ Expose fireBuy on the container element so the delegated click handler can reach it.\n        if ( root ) { root._kloktionFireBuy = fireBuy; }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        \/\/ Direct Buy binding removed \u2014 handled by delegated listener below so dynamically\n        \/\/ injected Buy buttons (AJAX cart updates, variation reloads) also work.\n    });\n\n    \/\/ FIX 4: Delegated click handler for .kloktion-one-click__buy.\n    \/\/ Covers buttons present at init AND any injected later (AJAX \/ variation reloads).\n    document.addEventListener('click', function(e) {\n        var btn = e.target && e.target.closest ? e.target.closest('.kloktion-one-click__buy') : null;\n        if ( ! btn ) { return; }\n        if ( btn.hidden || btn.disabled ) { return; }\n        e.preventDefault();\n        \/\/ Walk up to find the matching slider container and call its fireBuy.\n        \/\/ Each slider instance stores fireBuy on the container via data attr for delegation.\n        var container = btn.closest('.kloktion-one-click');\n        if ( container && typeof container._kloktionFireBuy === 'function' ) {\n            container._kloktionFireBuy();\n        }\n    }, false);\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n    \/\/ FIX 3: 12-second Turnstile timeout \u2014 if widget is in DOM but no token arrives, show inline error.\n    if ( isTurnstileExpected() ) {\n        setTimeout( function() {\n            if ( ! window.kloktionTurnstileToken ) {\n                document.querySelectorAll('.kloktion-one-click__buy').forEach( function(btn) {\n                    if ( btn.dataset.kloktionAwaitTurnstile === '1' ) {\n                        btn.textContent = 'Verification timed out. Reload page.';\n                        btn.setAttribute('aria-busy', 'false');\n                    }\n                } );\n            }\n        }, 12000 );\n    }\n\n})();\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:11","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Admin {\n\n    public static function init_product_hooks(): void {\n        add_filter( 'woocommerce_product_data_tabs', [ __CLASS__, 'product_data_tab' ] );\n        add_action( 'woocommerce_product_data_panels', [ __CLASS__, 'product_data_panel' ] );\n        add_action( 'woocommerce_process_product_meta', [ __CLASS__, 'save_product_meta' ] );\n        add_action( 'woocommerce_product_options_general_product_data', [ __CLASS__, 'show_general_tab_for_type' ] );\n        add_action( 'wp_ajax_kloktion_justice_button', [ __CLASS__, 'ajax_justice_button' ] );\n        add_action( 'wp_ajax_kloktion_justice_delete', [ __CLASS__, 'ajax_justice_delete' ] );\n        add_action( 'wp_ajax_kloktion_moderation_approve', [ __CLASS__, 'ajax_moderation_approve' ] );\n        add_action( 'wp_ajax_kloktion_moderation_reject', [ __CLASS__, 'ajax_moderation_reject' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_release', [ __CLASS__, 'ajax_dispute_resolve_release' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_refund', [ __CLASS__, 'ajax_dispute_resolve_refund' ] );\n        add_action( 'wp_ajax_kloktion_release_pending', [ __CLASS__, 'ajax_release_pending' ] );\n\n        add_action( 'add_meta_boxes', [ __CLASS__, 'add_log_metabox' ] );\n    }\n\n    public static function register_menu(): void {\n        add_menu_page(\n            __( 'Kloktion Auctions', 'kloktion-dutch-auction' ),\n            __( 'Kloktion', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ],\n            'dashicons-chart-area',\n            56\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-settings',\n            [ __CLASS__, 'render_settings' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-moderation',\n            [ __CLASS__, 'render_moderation_queue' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-disputes',\n            [ __CLASS__, 'render_disputes_page' ]\n        );\n    }\n\n    public static function product_data_tab( $tabs ) {\n        $tabs['kloktion_auction'] = [\n            'label'    => __( 'Dutch Auction', 'kloktion-dutch-auction' ),\n            'target'   => 'kloktion_auction_data',\n            'class'    => [ 'show_if_dutch_auction' ],\n            'priority' => 11,\n        ];\n        return $tabs;\n    }\n\n    public static function show_general_tab_for_type(): void {\n        \/\/ Add classes so WC shows General tab for dutch_auction type.\n        \/\/ Pricing field toggle is handled in kloktion-admin.js for reliability.\n        echo '<script>jQuery(function($){\n            $(\".product_data_tabs .general_tab\").addClass(\"show_if_dutch_auction\");\n            $(\"#general_product_data\").addClass(\"show_if_dutch_auction\");\n        });<\/script>';\n    }\n\n    public static function product_data_panel(): void {\n        global $post;\n        $product_id = $post->ID;\n\n        $start_price   = get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $duration      = get_post_meta( $product_id, '_kloktion_duration', true );\n        $start_time    = get_post_meta( $product_id, '_kloktion_start_time', true );\n        $status        = Auction_Engine::get_status( $product_id );\n        $start_now     = empty( $start_time );\n\n        echo '<div id=\"kloktion_auction_data\" class=\"panel woocommerce_options_panel hidden\">';\n\n        wp_nonce_field( 'kloktion_product_save', 'kloktion_product_nonce' );\n\n        $status_labels = [\n            'pending_review' => __( 'Awaiting Review', 'kloktion-dutch-auction' ),\n            'scheduled'      => '\ud83d\udfe1 Scheduled',\n            'active'         => '\ud83d\udfe2 Active',\n            'paused'         => '\ud83d\udd34 Last Chance',\n            'processing'     => '\ud83d\udd35 Processing',\n            'sold'           => '\u2705 Sold',\n            'expired'        => '\u26ab Expired',\n            'stopped'        => '\ud83d\uded1 Stopped',\n        ];\n        echo '<div class=\"options_group\">';\n        echo '<p class=\"form-field\"><label>' . esc_html__( 'Status', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<span class=\"kloktion-status-badge\">' . ( $status_labels[ $status ] ?? esc_html( $status ) ) . '<\/span>';\n\n        if ( in_array( $status, [ 'active', 'paused' ], true ) ) {\n            $current_price = Auction_Engine::calculate_price( $product_id );\n            $time_left     = Auction_Engine::get_time_remaining( $product_id );\n            echo ' | ' . esc_html__( 'Current Price:', 'kloktion-dutch-auction' ) . ' <strong>' . wp_kses_post( wc_price( $current_price ) ) . '<\/strong>';\n            echo ' | ' . esc_html__( 'Time Left:', 'kloktion-dutch-auction' ) . ' <strong>' . esc_html( gmdate( 'H:i:s', $time_left ) ) . '<\/strong>';\n        }\n        echo '<\/p><\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_start_price',\n            'label'             => sprintf( __( 'Start Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $start_price,\n            'desc_tip'          => true,\n            'description'       => __( 'The highest price the auction starts at.', 'kloktion-dutch-auction' ),\n        ] );\n\n        $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0;\n\n        woocommerce_wp_checkbox( [\n            'id'          => '_kloktion_no_reserve',\n            'label'       => __( 'No Reserve', 'kloktion-dutch-auction' ),\n            'value'       => $no_reserve ? 'yes' : 'no',\n            'description' => __( 'Allow price to drop to zero. No minimum price.', 'kloktion-dutch-auction' ),\n        ] );\n\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_reserve_price',\n            'label'             => sprintf( __( 'Reserve Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $no_reserve ? '' : $reserve_price,\n            'desc_tip'          => true,\n            'description'       => __( 'Minimum price the auction will drop to. Must be less than start price.', 'kloktion-dutch-auction' ),\n            'wrapper_class'     => $no_reserve ? 'kloktion-reserve-field hidden' : 'kloktion-reserve-field',\n        ] );\n        echo '<\/div>';\n        echo '<script>jQuery(function($){var cb=$(\"#_kloktion_no_reserve\"),f=$(\".kloktion-reserve-field\");cb.on(\"change\",function(){f.toggle(!this.checked);if(this.checked)$(\"#_kloktion_reserve_price\").val(\"\")});});<\/script>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_select( [\n            'id'      => '_kloktion_duration',\n            'label'   => __( 'Listing Duration', 'kloktion-dutch-auction' ),\n            'options' => [\n                ''      => __( 'Select duration...', 'kloktion-dutch-auction' ),\n                '259200'=> __( '3 days', 'kloktion-dutch-auction' ),\n                '432000'=> __( '5 days', 'kloktion-dutch-auction' ),\n                '604800'=> __( '7 days', 'kloktion-dutch-auction' ),\n                '864000'=> __( '10 days', 'kloktion-dutch-auction' ),\n            ],\n            'value'   => $duration,\n        ] );\n        echo '<\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_checkbox( [\n            'id'    => '_kloktion_start_now',\n            'label' => __( 'Start immediately', 'kloktion-dutch-auction' ),\n            'value' => $start_now ? 'yes' : 'no',\n        ] );\n\n        $schedule_date = $start_time ? gmdate( 'Y-m-d', (int) $start_time ) : '';\n        $schedule_time = $start_time ? gmdate( 'H:i', (int) $start_time ) : '';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_date\">' . esc_html__( 'Start Date', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"date\" id=\"_kloktion_schedule_date\" name=\"_kloktion_schedule_date\" value=\"' . esc_attr( $schedule_date ) . '\" style=\"width:auto;\" \/>';\n        echo '<\/p>';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_time\">' . esc_html__( 'Start Time', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"time\" id=\"_kloktion_schedule_time\" name=\"_kloktion_schedule_time\" value=\"' . esc_attr( $schedule_time ) . '\" style=\"width:auto;\" \/>';\n        echo '<span class=\"description\">' . esc_html__( 'UTC time. Leave empty and check \"Start immediately\" to start on save.', 'kloktion-dutch-auction' ) . '<\/span>';\n        echo '<\/p>';\n        echo '<\/div>';\n\n        if ( current_user_can( 'manage_woocommerce' ) && in_array( $status, [ 'active', 'paused', 'scheduled' ], true ) ) {\n            echo '<div class=\"options_group kloktion-justice-section\">';\n            echo '<h4 style=\"padding:0 12px;color:#c62828;\">' . esc_html__( 'Justice Button', 'kloktion-dutch-auction' ) . '<\/h4>';\n            echo '<p class=\"form-field\">';\n            echo '<label for=\"_kloktion_stop_reason\">' . esc_html__( 'Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<textarea id=\"_kloktion_stop_reason\" name=\"_kloktion_stop_reason\" rows=\"2\" placeholder=\"' . esc_attr__( 'Enter reason for stopping\/deleting this auction...', 'kloktion-dutch-auction' ) . '\"><\/textarea>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>' . esc_html__( 'Notify Seller', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<input type=\"checkbox\" id=\"_kloktion_notify_seller\" name=\"_kloktion_notify_seller\" value=\"yes\" checked=\"checked\" \/> ';\n            echo '<span class=\"description\">' . esc_html__( 'Send email notification to the seller with the reason.', 'kloktion-dutch-auction' ) . '<\/span>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>&nbsp;<\/label>';\n            echo '<button type=\"button\" id=\"kloktion-justice-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"stop\">';\n            echo esc_html__( 'Stop This Auction', 'kloktion-dutch-auction' );\n            echo '<\/button> &nbsp;';\n            echo '<button type=\"button\" id=\"kloktion-justice-delete-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"delete\" style=\"background:#c62828;border-color:#c62828;color:#fff;\">';\n            echo esc_html__( 'Delete Permanently', 'kloktion-dutch-auction' );\n            echo '<\/button>';\n            echo '<\/p>';\n            echo '<\/div>';\n        }\n\n        if ( current_user_can( 'manage_woocommerce' ) && 'pending_purchase' === $status ) {\n            $pending_order_id = (int) get_post_meta( $post->ID, '_kloktion_pending_order', true );\n            $deadline         = (int) get_post_meta( $post->ID, '_kloktion_payment_deadline', true );\n            ?>\n            <div class=\"options_group kloktion-pending-purchase-actions\" style=\"margin-top:12px;padding:12px;background:#fff7e6;border:1px solid #ffb84d;border-radius:4px;\">\n                <p style=\"margin:0 0 8px;\"><strong><?php esc_html_e( 'Pending Purchase', 'kloktion-dutch-auction' ); ?><\/strong><\/p>\n                <?php if ( $pending_order_id ) : ?>\n                    <p style=\"margin:0 0 4px;font-size:13px;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: order edit link *\/\n                            esc_html__( 'Order: %s', 'kloktion-dutch-auction' ),\n                            '<a href=\"' . esc_url( get_edit_post_link( $pending_order_id ) ) . '\">#' . esc_html( $pending_order_id ) . '<\/a>'\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <?php if ( $deadline ) : ?>\n                    <p style=\"margin:0 0 8px;font-size:13px;color:#666;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: human-readable deadline *\/\n                            esc_html__( 'Payment deadline: %s', 'kloktion-dutch-auction' ),\n                            esc_html( gmdate( 'Y-m-d H:i', $deadline ) . ' UTC' )\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <p class=\"form-field\">\n                    <label for=\"kloktion-release-reason\" style=\"font-size:13px;\"><?php esc_html_e( 'Reason', 'kloktion-dutch-auction' ); ?>:<\/label>\n                    <select id=\"kloktion-release-reason\" class=\"regular-text\" style=\"width:100%;\">\n                        <option value=\"penalty_unpaid\"><?php esc_html_e( 'Penalty unpaid (invalid card)', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"seller_request\"><?php esc_html_e( 'Seller request', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"admin_decision\"><?php esc_html_e( 'Admin decision', 'kloktion-dutch-auction' ); ?><\/option>\n                    <\/select>\n                <\/p>\n                <p class=\"form-field\">\n                    <label>&nbsp;<\/label>\n                    <button type=\"button\" class=\"button button-primary kloktion-release-pending-btn\"\n                        data-product-id=\"<?php echo (int) $post->ID; ?>\"\n                        data-nonce=\"<?php echo esc_attr( wp_create_nonce( 'kloktion_release_pending_' . $post->ID ) ); ?>\">\n                        <?php esc_html_e( 'Put back on sale', 'kloktion-dutch-auction' ); ?>\n                    <\/button>\n                <\/p>\n                <p style=\"margin:6px 0 0;font-size:13px;color:#666;\">\n                    <?php esc_html_e( 'Cancels the pending order, clears the reservation, and restarts the auction from the original start price.', 'kloktion-dutch-auction' ); ?>\n                <\/p>\n            <\/div>\n            <script>\n            (function($){\n                $(document).on('click', '.kloktion-release-pending-btn', function(e){\n                    e.preventDefault();\n                    var $btn = $(this);\n                    var reason = $('#kloktion-release-reason').val();\n                    if ( ! confirm(<?php echo wp_json_encode( __( 'Cancel the pending order and put this lot back on sale? This cannot be undone.', 'kloktion-dutch-auction' ) ); ?>) ) { return; }\n                    var $errDiv = $btn.closest('.form-field').find('.kloktion-release-error');\n                    if ( ! $errDiv.length ) {\n                        $errDiv = $('<p class=\"kloktion-release-error\" style=\"color:#c62828;margin:6px 0 0;font-size:13px;\"><\/p>').insertAfter($btn.closest('.form-field'));\n                    }\n                    $errDiv.text('').hide();\n                    $btn.prop('disabled', true).attr('aria-busy', 'true').text(<?php echo wp_json_encode( __( 'Processing...', 'kloktion-dutch-auction' ) ); ?>);\n                    $.post(ajaxurl, {\n                        action: 'kloktion_release_pending',\n                        product_id: $btn.data('product-id'),\n                        nonce: $btn.data('nonce'),\n                        reason: reason\n                    }).done(function(resp){\n                        if ( resp && resp.success ) {\n                            $btn.text(<?php echo wp_json_encode( __( 'Released. Reloading\u2026', 'kloktion-dutch-auction' ) ); ?>);\n                            setTimeout(function(){ location.reload(); }, 600);\n                        } else {\n                            var msg = (resp && resp.data && resp.data.message) || <?php echo wp_json_encode( __( 'An error occurred. Please try again.', 'kloktion-dutch-auction' ) ); ?>;\n                            $errDiv.text(msg).show();\n                            $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                        }\n                    }).fail(function(){\n                        $errDiv.text(<?php echo wp_json_encode( __( 'Network error. Please try again.', 'kloktion-dutch-auction' ) ); ?>).show();\n                        $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                    }).always(function(){\n                        $btn.removeAttr('aria-busy');\n                    });\n                });\n            })(jQuery);\n            <\/script>\n            <?php\n        }\n\n        if ( 'stopped' === $status ) {\n            $reason = get_post_meta( $product_id, '_kloktion_stop_reason', true );\n            $by     = get_post_meta( $product_id, '_kloktion_stop_by', true );\n            echo '<div class=\"options_group\">';\n            echo '<p class=\"form-field\"><label>' . esc_html__( 'Stop Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<span>' . esc_html( $reason ) . '<\/span><\/p>';\n            if ( $by ) {\n                $user = get_user_by( 'id', $by );\n                echo '<p class=\"form-field\"><label>' . esc_html__( 'Stopped By', 'kloktion-dutch-auction' ) . '<\/label>';\n                echo '<span>' . esc_html( $user ? $user->display_name : '#' . $by ) . '<\/span><\/p>';\n            }\n            echo '<\/div>';\n        }\n\n        echo '<\/div>';\n    }\n\n    public static function save_product_meta( int $post_id ): void {\n        if ( ! isset( $_POST['kloktion_product_nonce'] ) || ! wp_verify_nonce( $_POST['kloktion_product_nonce'], 'kloktion_product_save' ) ) {\n            return;\n        }\n\n        if ( ! current_user_can( 'edit_product', $post_id ) ) {\n            return;\n        }\n\n        \/\/ Check POST product-type (reliable on first publish; get_type() returns \"simple\" before term is saved).\n        $product_type = isset( $_POST['product-type'] ) ? sanitize_text_field( wp_unslash( $_POST['product-type'] ) ) : '';\n        if ( 'dutch_auction' !== $product_type ) {\n            return;\n        }\n\n        $start_price   = isset( $_POST['_kloktion_start_price'] ) ? floatval( $_POST['_kloktion_start_price'] ) : 0;\n        $no_reserve    = isset( $_POST['_kloktion_no_reserve'] ) && 'yes' === $_POST['_kloktion_no_reserve'];\n        $reserve_price = $no_reserve ? 0 : ( isset( $_POST['_kloktion_reserve_price'] ) ? floatval( $_POST['_kloktion_reserve_price'] ) : 0 );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : 0;\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n        if ( $duration <= 0 ) {\n            return;\n        }\n\n        update_post_meta( $post_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $post_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $post_id, '_kloktion_duration', $duration );\n\n        \/\/ WC price sync\n        update_post_meta( $post_id, '_regular_price', $start_price );\n        update_post_meta( $post_id, '_price', $start_price );\n\n        $current_status = Auction_Engine::get_status( $post_id );\n        $is_terminal    = in_array( $current_status, [ 'sold', 'expired', 'stopped' ], true );\n\n        $start_now = isset( $_POST['_kloktion_start_now'] ) && 'yes' === $_POST['_kloktion_start_now'];\n\n        if ( $start_now ) {\n            update_post_meta( $post_id, '_kloktion_start_time', time() );\n            update_post_meta( $post_id, '_kloktion_end_time', time() + $duration );\n\n            \/\/ Allow restart from terminal states (expired\/stopped) but not sold.\n            if ( 'active' !== $current_status && 'sold' !== $current_status ) {\n                update_post_meta( $post_id, '_kloktion_status', 'active' );\n                \/\/ Clear stale processing data.\n                delete_post_meta( $post_id, '_kloktion_processing_user' );\n                delete_post_meta( $post_id, '_kloktion_processing_since' );\n                delete_post_meta( $post_id, '_kloktion_pause_start' );\n                Logger::log( $post_id, 'active', $start_price, get_current_user_id() );\n                \/\/ Invalidate API cache.\n                delete_transient( 'kloktion_api_' . $post_id );\n                \/\/ Restore catalog visibility so restarted auction appears in shop.\n                $product = wc_get_product( $post_id );\n                if ( $product ) {\n                    $product->set_catalog_visibility( 'visible' );\n                    $product->save();\n                }\n            }\n        } elseif ( ! $is_terminal || 'stopped' === $current_status || 'expired' === $current_status ) {\n            \/\/ Allow scheduling from terminal states (except sold).\n            $schedule_date = isset( $_POST['_kloktion_schedule_date'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_date'] ) : '';\n            $schedule_time = isset( $_POST['_kloktion_schedule_time'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_time'] ) : '00:00';\n            if ( ! empty( $schedule_date ) ) {\n                $timestamp = strtotime( $schedule_date . ' ' . $schedule_time . ' UTC' );\n                if ( $timestamp ) {\n                    update_post_meta( $post_id, '_kloktion_start_time', $timestamp );\n                    update_post_meta( $post_id, '_kloktion_end_time', $timestamp + $duration );\n                    update_post_meta( $post_id, '_kloktion_status', 'scheduled' );\n                    delete_post_meta( $post_id, '_kloktion_processing_user' );\n                    delete_post_meta( $post_id, '_kloktion_processing_since' );\n                    delete_post_meta( $post_id, '_kloktion_pause_start' );\n                    Logger::log( $post_id, 'scheduled', $start_price, get_current_user_id() );\n                    delete_transient( 'kloktion_api_' . $post_id );\n                }\n            }\n        }\n    }\n\n    public static function ajax_justice_button(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $result = Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $result ) {\n            if ( $notify_seller ) {\n                self::notify_seller( $product_id, $reason, 'stopped' );\n            }\n            wp_send_json_success( 'Auction stopped.' );\n        } else {\n            wp_send_json_error( 'Cannot stop auction in its current state.' );\n        }\n    }\n\n    public static function ajax_justice_delete(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || 'dutch_auction' !== $product->get_type() ) {\n            wp_send_json_error( 'This is not a Dutch Auction product.' );\n        }\n\n        Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $notify_seller ) {\n            self::notify_seller( $product_id, $reason, 'deleted' );\n        }\n\n        \/\/ Log before deletion since the post won't exist after.\n        Logger::log( $product_id, 'deleted', 0, get_current_user_id() );\n\n        $deleted = wp_delete_post( $product_id, true );\n\n        if ( $deleted ) {\n            wp_send_json_success( 'Auction permanently deleted.' );\n        } else {\n            wp_send_json_error( 'Failed to delete the auction product.' );\n        }\n    }\n\n    private static function notify_seller( int $product_id, string $reason, string $action ): void {\n        $product = wc_get_product( $product_id );\n        if ( ! $product ) {\n            return;\n        }\n\n        $author_id = get_post_field( 'post_author', $product_id );\n        $seller    = get_user_by( 'id', $author_id );\n        if ( ! $seller || ! $seller->user_email ) {\n            return;\n        }\n\n        $action_label = 'deleted' === $action ? __( 'deleted', 'kloktion-dutch-auction' ) : __( 'stopped', 'kloktion-dutch-auction' );\n        $subject      = sprintf(\n            __( 'Your auction \"%s\" has been %s', 'kloktion-dutch-auction' ),\n            $product->get_name(),\n            $action_label\n        );\n        $message = sprintf(\n            __( \"Hello %s,\\n\\nYour auction \\\"%s\\\" has been %s by the site administrator.\\n\\nReason: %s\\n\\nIf you have questions, please contact the marketplace support.\\n\\nRegards,\\n%s\", 'kloktion-dutch-auction' ),\n            $seller->display_name,\n            $product->get_name(),\n            $action_label,\n            $reason,\n            get_bloginfo( 'name' )\n        );\n\n        wp_mail( $seller->user_email, $subject, $message );\n    }\n\n    public static function add_log_metabox(): void {\n        add_meta_box(\n            'kloktion_auction_log',\n            __( 'Auction Log', 'kloktion-dutch-auction' ),\n            [ __CLASS__, 'render_log_metabox' ],\n            'product',\n            'normal',\n            'low'\n        );\n    }\n\n    public static function render_log_metabox( $post ): void {\n        $product = wc_get_product( $post->ID );\n        if ( ! $product instanceof Product_Type ) {\n            echo '<p>' . esc_html__( 'This is not a Dutch Auction product.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        $logs = Logger::get_log( $post->ID, 30 );\n\n        if ( empty( $logs ) ) {\n            echo '<p>' . esc_html__( 'No auction events logged yet.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        echo '<table class=\"widefat striped\"><thead><tr>';\n        echo '<th>' . esc_html__( 'Date', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Event', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Price', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'User', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<\/tr><\/thead><tbody>';\n\n        foreach ( $logs as $log ) {\n            $user = $log->user_id ? get_user_by( 'id', $log->user_id ) : null;\n            echo '<tr>';\n            echo '<td>' . esc_html( $log->created_at ) . '<\/td>';\n            echo '<td><code>' . esc_html( $log->event ) . '<\/code><\/td>';\n            echo '<td>' . ( $log->price_at_event ? wp_kses_post( wc_price( $log->price_at_event ) ) : '\u2014' ) . '<\/td>';\n            echo '<td>' . esc_html( $user ? $user->display_name : ( $log->user_id ?: '\u2014' ) ) . '<\/td>';\n            echo '<\/tr>';\n        }\n\n        echo '<\/tbody><\/table>';\n    }\n\n    public static function render_dashboard(): void {\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/dashboard.php';\n    }\n\n    public static function render_moderation_queue(): void {\n        global $wpdb;\n\n        $table        = $wpdb->prefix . 'kloktion_moderation_queue';\n        $pending_items = $wpdb->get_results(\n            \"SELECT * FROM {$table} WHERE status = 'pending' ORDER BY submitted_at DESC\"\n        );\n\n        require KLOKTION_PLUGIN_DIR . 'admin\/views\/moderation-queue.php';\n    }\n\n    public static function ajax_moderation_approve(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id    = (int) $row->product_id;\n        $submitted_data = json_decode( $row->submitted_data, true );\n\n        \/\/ Stale queue guard: the product may have moved past pending_review (e.g. sold while in queue).\n        $current_kloktion_status = get_post_meta( $product_id, '_kloktion_status', true );\n        $terminal_states = [ 'sold', 'active', 'paused', 'processing', 'expired' ];\n        if ( in_array( $current_kloktion_status, $terminal_states, true ) ) {\n            \/\/ Clean up the orphan queue row.\n            $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n            wp_send_json_error( sprintf(\n                'Product is no longer eligible for moderation (current status: %s). Queue row removed.',\n                $current_kloktion_status\n            ) );\n        }\n\n        \/\/ Apply each meta key\/value from submitted data (blacklist managed fields).\n        if ( is_array( $submitted_data ) ) {\n            $blacklist = [ '_kloktion_status' ]; \/\/ managed separately via transition_status\n            foreach ( $submitted_data as $meta_key => $meta_value ) {\n                $key = sanitize_key( $meta_key );\n                if ( in_array( $key, $blacklist, true ) ) {\n                    continue;\n                }\n                \/\/ Normalize _kloktion_is_auction to '1' (force_auction_product_type does strict === '1' check).\n                if ( '_kloktion_is_auction' === $key && in_array( $meta_value, [ 'yes', 'true', true, 1 ], true ) ) {\n                    $meta_value = '1';\n                }\n                update_post_meta( $product_id, $key, $meta_value );\n            }\n        }\n\n        \/\/ Ensure _kloktion_status is 'pending_review' before transitioning so the\n        \/\/ valid_transitions table always has a matching entry. Without this, if submitted_data\n        \/\/ overwrote the status to something unexpected (or the meta was missing) the\n        \/\/ transition would silently return false and the status would stay wrong.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Determine target status based on start_time.\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        if ( $start_time <= 0 ) {\n            \/\/ No start date submitted (vendor form has no date picker) \u2192 start now.\n            $start_time = time();\n            update_post_meta( $product_id, '_kloktion_start_time', $start_time );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_time + $duration );\n            }\n            $new_status = 'active';\n        } else {\n            $new_status = ( $start_time <= time() ) ? 'active' : 'scheduled';\n        }\n        Auction_Engine::transition_status( $product_id, $new_status );\n\n        \/\/ Publish the WC post so it appears on the shop page and in the vendor dashboard.\n        \/\/ Vendor-submitted products land as 'pending'; approving must flip them to 'publish'.\n        \/\/ We call wp_update_post directly here (admin context, no Dokan hooks involved).\n        $post = get_post( $product_id );\n        if ( $post && 'publish' !== $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'publish',\n            ] );\n        }\n\n        \/\/ Restore catalog visibility (sync_catalog_visibility hook only fires when transitioning\n        \/\/ OUT of sold\/expired\/stopped \u2014 but for first-time approval from pending_review, that\n        \/\/ listener is a no-op, so set it explicitly).\n        $product_obj = wc_get_product( $product_id );\n        if ( $product_obj ) {\n            $product_obj->set_catalog_visibility( 'visible' );\n            $product_obj->save();\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'approved',\n                'admin_id'   => get_current_user_id(),\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_approved', $product_id );\n\n        wp_send_json_success( [ 'message' => __( 'Auction approved and scheduled.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_moderation_reject(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        $reason   = isset( $_POST['reason'] ) ? sanitize_textarea_field( wp_unslash( $_POST['reason'] ) ) : '';\n\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n        if ( empty( $reason ) ) {\n            wp_send_json_error( 'Rejection reason is required.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id = (int) $row->product_id;\n\n        \/\/ Transition product back to stopped.\n        Auction_Engine::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => $reason,\n            '_kloktion_stop_by'     => get_current_user_id(),\n        ] );\n\n        \/\/ If product was never published (vendor's first submission), move to draft so the\n        \/\/ vendor can find, edit, and resubmit. Otherwise leave post_status as-is.\n        $post = get_post( $product_id );\n        if ( $post && 'pending' === $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'draft',\n            ] );\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'rejected',\n                'admin_id'   => get_current_user_id(),\n                'notes'      => $reason,\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_rejected', $product_id, $reason );\n\n        wp_send_json_success( [ 'message' => __( 'Auction rejected.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_disputes_page(): void {\n        global $wpdb;\n        $disputes_table = $wpdb->prefix . 'kloktion_disputes';\n        $escrow_table   = $wpdb->prefix . 'kloktion_escrow';\n\n        \/\/ Handle view detail \/ resolve actions.\n        $view_id = isset( $_GET['view'] ) ? (int) $_GET['view'] : 0;\n\n        if ( $view_id > 0 ) {\n            $dispute = $wpdb->get_row( $wpdb->prepare(\n                \"SELECT d.*, e.amount, e.currency, e.vendor_id, e.product_id, e.charge_id, e.status as escrow_status\n                 FROM $disputes_table d\n                 LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n                 WHERE d.id = %d\",\n                $view_id\n            ) );\n            if ( ! $dispute ) {\n                echo '<div class=\"wrap\"><h1>' . esc_html__( 'Dispute not found', 'kloktion-dutch-auction' ) . '<\/h1><\/div>';\n                return;\n            }\n            include KLOKTION_PLUGIN_DIR . 'admin\/views\/dispute-detail.php';\n            return;\n        }\n\n        \/\/ List view \u2014 open disputes first, then resolved.\n        $disputes = $wpdb->get_results(\n            \"SELECT d.*, e.amount, e.currency, e.vendor_id\n             FROM $disputes_table d\n             LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n             ORDER BY CASE d.status WHEN 'open' THEN 0 ELSE 1 END, d.created_at DESC\n             LIMIT 100\"\n        );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/disputes-list.php';\n    }\n\n    public static function ajax_dispute_resolve_release(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Release escrow (funds go to seller).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            \\Kloktion\\Stripe_Payment::release_escrow( $dispute->escrow_id, 'admin_release' );\n        }\n\n        \/\/ Mark dispute resolved.\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_release',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_release', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Dispute resolved \u2014 funds released to seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_dispute_resolve_refund(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Refund via Stripe (reverses the destination charge).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            $refund = \\Kloktion\\Stripe_Payment::refund_payment( $dispute->escrow_id, $notes );\n            if ( is_wp_error( $refund ) ) {\n                wp_send_json_error( [ 'message' => 'Refund failed: ' . $refund->get_error_message() ] );\n            }\n        }\n\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_refund',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_refund', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Buyer refunded \u2014 funds reversed from seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/**\n     * R12: Manually release a stuck pending_purchase lot and restart the auction.\n     *\/\n    public static function ajax_release_pending(): void {\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $nonce      = isset( $_POST['nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';\n        $reason     = isset( $_POST['reason'] ) ? sanitize_key( wp_unslash( $_POST['reason'] ) ) : 'admin_decision';\n\n        if ( ! $product_id || ! wp_verify_nonce( $nonce, 'kloktion_release_pending_' . $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => __( 'Permission denied.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        \/\/ FIX A1: Atomic SQL claim \u2014 replaces in-process wp_cache_add lock.\n        \/\/ Only ONE caller can flip pending_purchase \u2192 releasing; concurrent requests get 409.\n        global $wpdb;\n        $rows = $wpdb->query( $wpdb->prepare(\n            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n            'releasing',\n            $product_id,\n            '_kloktion_status',\n            'pending_purchase'\n        ) );\n        if ( 1 !== (int) $rows ) {\n            wp_send_json_error( [ 'message' => __( 'Auction state changed. Reload and retry.', 'kloktion-dutch-auction' ) ], 409 );\n        }\n        \/\/ Flush WP object cache so subsequent get_post_meta reads reflect 'releasing'.\n        wp_cache_delete( $product_id, 'post_meta' );\n\n        \/\/ Whitelist reason values.\n        $allowed_reasons = [ 'penalty_unpaid', 'seller_request', 'admin_decision' ];\n        if ( ! in_array( $reason, $allowed_reasons, true ) ) {\n            $reason = 'admin_decision';\n        }\n\n        \/\/ Cancel pending order.\n        $order_id = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n        if ( $order_id && function_exists( 'wc_get_order' ) ) {\n            $order = wc_get_order( $order_id );\n            if ( $order ) {\n                \/\/ Marker is written UNCONDITIONALLY so late async webhooks on already-cancelled\/failed\n                \/\/ orders still hit the checkout-handler guard and cannot re-trigger the sale.\n                $order->update_meta_data( '_kloktion_released_by_admin', '1' );\n                $order->update_meta_data( '_kloktion_release_reason', $reason );\n                $order->save();\n\n                if ( ! in_array( $order->get_status(), [ 'cancelled', 'refunded', 'failed' ], true ) ) {\n                    $cancel_result = $order->update_status(\n                        'cancelled',\n                        sprintf(\n                            \/* translators: %s: reason key *\/\n                            __( 'Admin released pending purchase. Reason: %s', 'kloktion-dutch-auction' ),\n                            $reason\n                        )\n                    );\n                    if ( ! $cancel_result ) {\n                        \/\/ Rollback: restore pending_purchase so admin can retry.\n                        $wpdb->query( $wpdb->prepare(\n                            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                            'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n                        ) );\n                        wp_cache_delete( $product_id, 'post_meta' );\n                        wp_send_json_error( [ 'message' => __( 'Failed to cancel the pending order. No changes made.', 'kloktion-dutch-auction' ) ], 500 );\n                    }\n                }\n            }\n        }\n\n        \/\/ Clear pending meta.\n        delete_post_meta( $product_id, '_kloktion_pending_user' );\n        delete_post_meta( $product_id, '_kloktion_pending_order' );\n        delete_post_meta( $product_id, '_kloktion_pending_price' );\n        delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n\n        \/\/ Reset auction price + time.\n        $start_price = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $duration    = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n        $now         = time();\n\n        if ( $start_price <= 0 ) {\n            \/\/ Rollback: cannot restart without a valid start price.\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Auction has no start price configured. Cannot restart.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_current_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_start_time', $now );\n        if ( $duration > 0 ) {\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n        }\n\n        \/\/ Transition status: releasing \u2192 active (via transition table).\n        $transitioned = \\Kloktion\\Auction_Engine::transition_status( $product_id, 'active', [] );\n        if ( ! $transitioned ) {\n            \/\/ Rollback: transition blocked (edge case \u2014 status may have been mutated externally).\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Transition to active failed. Auction status restored. Reload and retry.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        \/\/ Log the admin action.\n        Logger::log(\n            $product_id,\n            'admin_release_pending',\n            $start_price,\n            get_current_user_id(),\n            [ 'reason' => $reason, 'cancelled_order' => $order_id ]\n        );\n\n        wp_send_json_success( [ 'message' => __( 'Auction released and restarted.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_settings(): void {\n        if ( isset( $_POST['kloktion_settings_nonce'] ) && wp_verify_nonce( $_POST['kloktion_settings_nonce'], 'kloktion_save_settings' ) && current_user_can( 'manage_woocommerce' ) ) {\n            $settings = [\n                'global_pause'            => ! empty( $_POST['global_pause'] ) ? 1 : 0,\n                'default_duration'        => absint( $_POST['default_duration'] ?? 86400 ),\n                'pause_duration'          => absint( $_POST['pause_duration'] ?? 180 ),\n                'freeze_timeout'          => absint( $_POST['freeze_timeout'] ?? 600 ),\n                'rate_limit'              => absint( $_POST['rate_limit'] ?? 60 ),\n                'poll_interval'           => absint( $_POST['poll_interval'] ?? 2 ),\n                'processing_timeout'      => absint( $_POST['processing_timeout'] ?? 900 ),\n                'moderation_enabled'      => ! empty( $_POST['moderation_enabled'] ) ? 1 : 0,\n                'escrow_enabled'          => ! empty( $_POST['escrow_enabled'] ) ? 1 : 0,\n                'stripe_platform_secret'  => sanitize_text_field( $_POST['stripe_platform_secret'] ?? '' ),\n                'stripe_webhook_secret'   => sanitize_text_field( $_POST['stripe_webhook_secret'] ?? '' ),\n                'commission_percent'      => max( 0, min( 100, (float) ( $_POST['commission_percent'] ?? 10 ) ) ),\n                'dispute_window_days'     => max( 1, min( 60, (int) ( $_POST['dispute_window_days'] ?? 7 ) ) ),\n                'auto_release_days'       => max( 1, min( 60, (int) ( $_POST['auto_release_days'] ?? 10 ) ) ),\n            ];\n            update_option( 'kloktion_settings', $settings );\n            \/\/ reCAPTCHA keys stored as standalone options (not inside $settings array).\n            update_option( 'kloktion_recaptcha_site_key', sanitize_text_field( $_POST['kloktion_recaptcha_site_key'] ?? '' ) );\n            update_option( 'kloktion_recaptcha_secret_key', sanitize_text_field( $_POST['kloktion_recaptcha_secret_key'] ?? '' ) );\n            echo '<div class=\"updated\"><p>' . esc_html__( 'Settings saved.', 'kloktion-dutch-auction' ) . '<\/p><\/div>';\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/settings.php';\n    }\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:11","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Admin {\n\n    public static function init_product_hooks(): void {\n        add_filter( 'woocommerce_product_data_tabs', [ __CLASS__, 'product_data_tab' ] );\n        add_action( 'woocommerce_product_data_panels', [ __CLASS__, 'product_data_panel' ] );\n        add_action( 'woocommerce_process_product_meta', [ __CLASS__, 'save_product_meta' ] );\n        add_action( 'woocommerce_product_options_general_product_data', [ __CLASS__, 'show_general_tab_for_type' ] );\n        add_action( 'wp_ajax_kloktion_justice_button', [ __CLASS__, 'ajax_justice_button' ] );\n        add_action( 'wp_ajax_kloktion_justice_delete', [ __CLASS__, 'ajax_justice_delete' ] );\n        add_action( 'wp_ajax_kloktion_moderation_approve', [ __CLASS__, 'ajax_moderation_approve' ] );\n        add_action( 'wp_ajax_kloktion_moderation_reject', [ __CLASS__, 'ajax_moderation_reject' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_release', [ __CLASS__, 'ajax_dispute_resolve_release' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_refund', [ __CLASS__, 'ajax_dispute_resolve_refund' ] );\n        add_action( 'wp_ajax_kloktion_release_pending', [ __CLASS__, 'ajax_release_pending' ] );\n\n        add_action( 'add_meta_boxes', [ __CLASS__, 'add_log_metabox' ] );\n    }\n\n    public static function register_menu(): void {\n        add_menu_page(\n            __( 'Kloktion Auctions', 'kloktion-dutch-auction' ),\n            __( 'Kloktion', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ],\n            'dashicons-chart-area',\n            56\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-settings',\n            [ __CLASS__, 'render_settings' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-moderation',\n            [ __CLASS__, 'render_moderation_queue' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-disputes',\n            [ __CLASS__, 'render_disputes_page' ]\n        );\n    }\n\n    public static function product_data_tab( $tabs ) {\n        $tabs['kloktion_auction'] = [\n            'label'    => __( 'Dutch Auction', 'kloktion-dutch-auction' ),\n            'target'   => 'kloktion_auction_data',\n            'class'    => [ 'show_if_dutch_auction' ],\n            'priority' => 11,\n        ];\n        return $tabs;\n    }\n\n    public static function show_general_tab_for_type(): void {\n        \/\/ Add classes so WC shows General tab for dutch_auction type.\n        \/\/ Pricing field toggle is handled in kloktion-admin.js for reliability.\n        echo '<script>jQuery(function($){\n            $(\".product_data_tabs .general_tab\").addClass(\"show_if_dutch_auction\");\n            $(\"#general_product_data\").addClass(\"show_if_dutch_auction\");\n        });<\/script>';\n    }\n\n    public static function product_data_panel(): void {\n        global $post;\n        $product_id = $post->ID;\n\n        $start_price   = get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $duration      = get_post_meta( $product_id, '_kloktion_duration', true );\n        $start_time    = get_post_meta( $product_id, '_kloktion_start_time', true );\n        $status        = Auction_Engine::get_status( $product_id );\n        $start_now     = empty( $start_time );\n\n        echo '<div id=\"kloktion_auction_data\" class=\"panel woocommerce_options_panel hidden\">';\n\n        wp_nonce_field( 'kloktion_product_save', 'kloktion_product_nonce' );\n\n        $status_labels = [\n            'pending_review' => __( 'Awaiting Review', 'kloktion-dutch-auction' ),\n            'scheduled'      => '\ud83d\udfe1 Scheduled',\n            'active'         => '\ud83d\udfe2 Active',\n            'paused'         => '\ud83d\udd34 Last Chance',\n            'processing'     => '\ud83d\udd35 Processing',\n            'sold'           => '\u2705 Sold',\n            'expired'        => '\u26ab Expired',\n            'stopped'        => '\ud83d\uded1 Stopped',\n        ];\n        echo '<div class=\"options_group\">';\n        echo '<p class=\"form-field\"><label>' . esc_html__( 'Status', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<span class=\"kloktion-status-badge\">' . ( $status_labels[ $status ] ?? esc_html( $status ) ) . '<\/span>';\n\n        if ( in_array( $status, [ 'active', 'paused' ], true ) ) {\n            $current_price = Auction_Engine::calculate_price( $product_id );\n            $time_left     = Auction_Engine::get_time_remaining( $product_id );\n            echo ' | ' . esc_html__( 'Current Price:', 'kloktion-dutch-auction' ) . ' <strong>' . wp_kses_post( wc_price( $current_price ) ) . '<\/strong>';\n            echo ' | ' . esc_html__( 'Time Left:', 'kloktion-dutch-auction' ) . ' <strong>' . esc_html( gmdate( 'H:i:s', $time_left ) ) . '<\/strong>';\n        }\n        echo '<\/p><\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_start_price',\n            'label'             => sprintf( __( 'Start Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $start_price,\n            'desc_tip'          => true,\n            'description'       => __( 'The highest price the auction starts at.', 'kloktion-dutch-auction' ),\n        ] );\n\n        $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0;\n\n        woocommerce_wp_checkbox( [\n            'id'          => '_kloktion_no_reserve',\n            'label'       => __( 'No Reserve', 'kloktion-dutch-auction' ),\n            'value'       => $no_reserve ? 'yes' : 'no',\n            'description' => __( 'Allow price to drop to zero. No minimum price.', 'kloktion-dutch-auction' ),\n        ] );\n\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_reserve_price',\n            'label'             => sprintf( __( 'Reserve Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $no_reserve ? '' : $reserve_price,\n            'desc_tip'          => true,\n            'description'       => __( 'Minimum price the auction will drop to. Must be less than start price.', 'kloktion-dutch-auction' ),\n            'wrapper_class'     => $no_reserve ? 'kloktion-reserve-field hidden' : 'kloktion-reserve-field',\n        ] );\n        echo '<\/div>';\n        echo '<script>jQuery(function($){var cb=$(\"#_kloktion_no_reserve\"),f=$(\".kloktion-reserve-field\");cb.on(\"change\",function(){f.toggle(!this.checked);if(this.checked)$(\"#_kloktion_reserve_price\").val(\"\")});});<\/script>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_select( [\n            'id'      => '_kloktion_duration',\n            'label'   => __( 'Listing Duration', 'kloktion-dutch-auction' ),\n            'options' => [\n                ''      => __( 'Select duration...', 'kloktion-dutch-auction' ),\n                '259200'=> __( '3 days', 'kloktion-dutch-auction' ),\n                '432000'=> __( '5 days', 'kloktion-dutch-auction' ),\n                '604800'=> __( '7 days', 'kloktion-dutch-auction' ),\n                '864000'=> __( '10 days', 'kloktion-dutch-auction' ),\n            ],\n            'value'   => $duration,\n        ] );\n        echo '<\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_checkbox( [\n            'id'    => '_kloktion_start_now',\n            'label' => __( 'Start immediately', 'kloktion-dutch-auction' ),\n            'value' => $start_now ? 'yes' : 'no',\n        ] );\n\n        $schedule_date = $start_time ? gmdate( 'Y-m-d', (int) $start_time ) : '';\n        $schedule_time = $start_time ? gmdate( 'H:i', (int) $start_time ) : '';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_date\">' . esc_html__( 'Start Date', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"date\" id=\"_kloktion_schedule_date\" name=\"_kloktion_schedule_date\" value=\"' . esc_attr( $schedule_date ) . '\" style=\"width:auto;\" \/>';\n        echo '<\/p>';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_time\">' . esc_html__( 'Start Time', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"time\" id=\"_kloktion_schedule_time\" name=\"_kloktion_schedule_time\" value=\"' . esc_attr( $schedule_time ) . '\" style=\"width:auto;\" \/>';\n        echo '<span class=\"description\">' . esc_html__( 'UTC time. Leave empty and check \"Start immediately\" to start on save.', 'kloktion-dutch-auction' ) . '<\/span>';\n        echo '<\/p>';\n        echo '<\/div>';\n\n        if ( current_user_can( 'manage_woocommerce' ) && in_array( $status, [ 'active', 'paused', 'scheduled' ], true ) ) {\n            echo '<div class=\"options_group kloktion-justice-section\">';\n            echo '<h4 style=\"padding:0 12px;color:#c62828;\">' . esc_html__( 'Justice Button', 'kloktion-dutch-auction' ) . '<\/h4>';\n            echo '<p class=\"form-field\">';\n            echo '<label for=\"_kloktion_stop_reason\">' . esc_html__( 'Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<textarea id=\"_kloktion_stop_reason\" name=\"_kloktion_stop_reason\" rows=\"2\" placeholder=\"' . esc_attr__( 'Enter reason for stopping\/deleting this auction...', 'kloktion-dutch-auction' ) . '\"><\/textarea>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>' . esc_html__( 'Notify Seller', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<input type=\"checkbox\" id=\"_kloktion_notify_seller\" name=\"_kloktion_notify_seller\" value=\"yes\" checked=\"checked\" \/> ';\n            echo '<span class=\"description\">' . esc_html__( 'Send email notification to the seller with the reason.', 'kloktion-dutch-auction' ) . '<\/span>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>&nbsp;<\/label>';\n            echo '<button type=\"button\" id=\"kloktion-justice-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"stop\">';\n            echo esc_html__( 'Stop This Auction', 'kloktion-dutch-auction' );\n            echo '<\/button> &nbsp;';\n            echo '<button type=\"button\" id=\"kloktion-justice-delete-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"delete\" style=\"background:#c62828;border-color:#c62828;color:#fff;\">';\n            echo esc_html__( 'Delete Permanently', 'kloktion-dutch-auction' );\n            echo '<\/button>';\n            echo '<\/p>';\n            echo '<\/div>';\n        }\n\n        if ( current_user_can( 'manage_woocommerce' ) && 'pending_purchase' === $status ) {\n            $pending_order_id = (int) get_post_meta( $post->ID, '_kloktion_pending_order', true );\n            $deadline         = (int) get_post_meta( $post->ID, '_kloktion_payment_deadline', true );\n            ?>\n            <div class=\"options_group kloktion-pending-purchase-actions\" style=\"margin-top:12px;padding:12px;background:#fff7e6;border:1px solid #ffb84d;border-radius:4px;\">\n                <p style=\"margin:0 0 8px;\"><strong><?php esc_html_e( 'Pending Purchase', 'kloktion-dutch-auction' ); ?><\/strong><\/p>\n                <?php if ( $pending_order_id ) : ?>\n                    <p style=\"margin:0 0 4px;font-size:13px;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: order edit link *\/\n                            esc_html__( 'Order: %s', 'kloktion-dutch-auction' ),\n                            '<a href=\"' . esc_url( get_edit_post_link( $pending_order_id ) ) . '\">#' . esc_html( $pending_order_id ) . '<\/a>'\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <?php if ( $deadline ) : ?>\n                    <p style=\"margin:0 0 8px;font-size:13px;color:#666;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: human-readable deadline *\/\n                            esc_html__( 'Payment deadline: %s', 'kloktion-dutch-auction' ),\n                            esc_html( gmdate( 'Y-m-d H:i', $deadline ) . ' UTC' )\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <p class=\"form-field\">\n                    <label for=\"kloktion-release-reason\" style=\"font-size:13px;\"><?php esc_html_e( 'Reason', 'kloktion-dutch-auction' ); ?>:<\/label>\n                    <select id=\"kloktion-release-reason\" class=\"regular-text\" style=\"width:100%;\">\n                        <option value=\"penalty_unpaid\"><?php esc_html_e( 'Penalty unpaid (invalid card)', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"seller_request\"><?php esc_html_e( 'Seller request', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"admin_decision\"><?php esc_html_e( 'Admin decision', 'kloktion-dutch-auction' ); ?><\/option>\n                    <\/select>\n                <\/p>\n                <p class=\"form-field\">\n                    <label>&nbsp;<\/label>\n                    <button type=\"button\" class=\"button button-primary kloktion-release-pending-btn\"\n                        data-product-id=\"<?php echo (int) $post->ID; ?>\"\n                        data-nonce=\"<?php echo esc_attr( wp_create_nonce( 'kloktion_release_pending_' . $post->ID ) ); ?>\">\n                        <?php esc_html_e( 'Put back on sale', 'kloktion-dutch-auction' ); ?>\n                    <\/button>\n                <\/p>\n                <p style=\"margin:6px 0 0;font-size:13px;color:#666;\">\n                    <?php esc_html_e( 'Cancels the pending order, clears the reservation, and restarts the auction from the original start price.', 'kloktion-dutch-auction' ); ?>\n                <\/p>\n            <\/div>\n            <script>\n            (function($){\n                $(document).on('click', '.kloktion-release-pending-btn', function(e){\n                    e.preventDefault();\n                    var $btn = $(this);\n                    var reason = $('#kloktion-release-reason').val();\n                    if ( ! confirm(<?php echo wp_json_encode( __( 'Cancel the pending order and put this lot back on sale? This cannot be undone.', 'kloktion-dutch-auction' ) ); ?>) ) { return; }\n                    var $errDiv = $btn.closest('.form-field').find('.kloktion-release-error');\n                    if ( ! $errDiv.length ) {\n                        $errDiv = $('<p class=\"kloktion-release-error\" style=\"color:#c62828;margin:6px 0 0;font-size:13px;\"><\/p>').insertAfter($btn.closest('.form-field'));\n                    }\n                    $errDiv.text('').hide();\n                    $btn.prop('disabled', true).attr('aria-busy', 'true').text(<?php echo wp_json_encode( __( 'Processing...', 'kloktion-dutch-auction' ) ); ?>);\n                    $.post(ajaxurl, {\n                        action: 'kloktion_release_pending',\n                        product_id: $btn.data('product-id'),\n                        nonce: $btn.data('nonce'),\n                        reason: reason\n                    }).done(function(resp){\n                        if ( resp && resp.success ) {\n                            $btn.text(<?php echo wp_json_encode( __( 'Released. Reloading\u2026', 'kloktion-dutch-auction' ) ); ?>);\n                            setTimeout(function(){ location.reload(); }, 600);\n                        } else {\n                            var msg = (resp && resp.data && resp.data.message) || <?php echo wp_json_encode( __( 'An error occurred. Please try again.', 'kloktion-dutch-auction' ) ); ?>;\n                            $errDiv.text(msg).show();\n                            $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                        }\n                    }).fail(function(){\n                        $errDiv.text(<?php echo wp_json_encode( __( 'Network error. Please try again.', 'kloktion-dutch-auction' ) ); ?>).show();\n                        $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                    }).always(function(){\n                        $btn.removeAttr('aria-busy');\n                    });\n                });\n            })(jQuery);\n            <\/script>\n            <?php\n        }\n\n        if ( 'stopped' === $status ) {\n            $reason = get_post_meta( $product_id, '_kloktion_stop_reason', true );\n            $by     = get_post_meta( $product_id, '_kloktion_stop_by', true );\n            echo '<div class=\"options_group\">';\n            echo '<p class=\"form-field\"><label>' . esc_html__( 'Stop Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<span>' . esc_html( $reason ) . '<\/span><\/p>';\n            if ( $by ) {\n                $user = get_user_by( 'id', $by );\n                echo '<p class=\"form-field\"><label>' . esc_html__( 'Stopped By', 'kloktion-dutch-auction' ) . '<\/label>';\n                echo '<span>' . esc_html( $user ? $user->display_name : '#' . $by ) . '<\/span><\/p>';\n            }\n            echo '<\/div>';\n        }\n\n        echo '<\/div>';\n    }\n\n    public static function save_product_meta( int $post_id ): void {\n        if ( ! isset( $_POST['kloktion_product_nonce'] ) || ! wp_verify_nonce( $_POST['kloktion_product_nonce'], 'kloktion_product_save' ) ) {\n            return;\n        }\n\n        if ( ! current_user_can( 'edit_product', $post_id ) ) {\n            return;\n        }\n\n        \/\/ Check POST product-type (reliable on first publish; get_type() returns \"simple\" before term is saved).\n        $product_type = isset( $_POST['product-type'] ) ? sanitize_text_field( wp_unslash( $_POST['product-type'] ) ) : '';\n        if ( 'dutch_auction' !== $product_type ) {\n            return;\n        }\n\n        $start_price   = isset( $_POST['_kloktion_start_price'] ) ? floatval( $_POST['_kloktion_start_price'] ) : 0;\n        $no_reserve    = isset( $_POST['_kloktion_no_reserve'] ) && 'yes' === $_POST['_kloktion_no_reserve'];\n        $reserve_price = $no_reserve ? 0 : ( isset( $_POST['_kloktion_reserve_price'] ) ? floatval( $_POST['_kloktion_reserve_price'] ) : 0 );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : 0;\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n        if ( $duration <= 0 ) {\n            return;\n        }\n\n        update_post_meta( $post_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $post_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $post_id, '_kloktion_duration', $duration );\n\n        \/\/ WC price sync\n        update_post_meta( $post_id, '_regular_price', $start_price );\n        update_post_meta( $post_id, '_price', $start_price );\n\n        $current_status = Auction_Engine::get_status( $post_id );\n        $is_terminal    = in_array( $current_status, [ 'sold', 'expired', 'stopped' ], true );\n\n        $start_now = isset( $_POST['_kloktion_start_now'] ) && 'yes' === $_POST['_kloktion_start_now'];\n\n        if ( $start_now ) {\n            update_post_meta( $post_id, '_kloktion_start_time', time() );\n            update_post_meta( $post_id, '_kloktion_end_time', time() + $duration );\n\n            \/\/ Allow restart from terminal states (expired\/stopped) but not sold.\n            if ( 'active' !== $current_status && 'sold' !== $current_status ) {\n                update_post_meta( $post_id, '_kloktion_status', 'active' );\n                \/\/ Clear stale processing data.\n                delete_post_meta( $post_id, '_kloktion_processing_user' );\n                delete_post_meta( $post_id, '_kloktion_processing_since' );\n                delete_post_meta( $post_id, '_kloktion_pause_start' );\n                Logger::log( $post_id, 'active', $start_price, get_current_user_id() );\n                \/\/ Invalidate API cache.\n                delete_transient( 'kloktion_api_' . $post_id );\n                \/\/ Restore catalog visibility so restarted auction appears in shop.\n                $product = wc_get_product( $post_id );\n                if ( $product ) {\n                    $product->set_catalog_visibility( 'visible' );\n                    $product->save();\n                }\n            }\n        } elseif ( ! $is_terminal || 'stopped' === $current_status || 'expired' === $current_status ) {\n            \/\/ Allow scheduling from terminal states (except sold).\n            $schedule_date = isset( $_POST['_kloktion_schedule_date'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_date'] ) : '';\n            $schedule_time = isset( $_POST['_kloktion_schedule_time'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_time'] ) : '00:00';\n            if ( ! empty( $schedule_date ) ) {\n                $timestamp = strtotime( $schedule_date . ' ' . $schedule_time . ' UTC' );\n                if ( $timestamp ) {\n                    update_post_meta( $post_id, '_kloktion_start_time', $timestamp );\n                    update_post_meta( $post_id, '_kloktion_end_time', $timestamp + $duration );\n                    update_post_meta( $post_id, '_kloktion_status', 'scheduled' );\n                    delete_post_meta( $post_id, '_kloktion_processing_user' );\n                    delete_post_meta( $post_id, '_kloktion_processing_since' );\n                    delete_post_meta( $post_id, '_kloktion_pause_start' );\n                    Logger::log( $post_id, 'scheduled', $start_price, get_current_user_id() );\n                    delete_transient( 'kloktion_api_' . $post_id );\n                }\n            }\n        }\n    }\n\n    public static function ajax_justice_button(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $result = Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $result ) {\n            if ( $notify_seller ) {\n                self::notify_seller( $product_id, $reason, 'stopped' );\n            }\n            wp_send_json_success( 'Auction stopped.' );\n        } else {\n            wp_send_json_error( 'Cannot stop auction in its current state.' );\n        }\n    }\n\n    public static function ajax_justice_delete(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || 'dutch_auction' !== $product->get_type() ) {\n            wp_send_json_error( 'This is not a Dutch Auction product.' );\n        }\n\n        Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $notify_seller ) {\n            self::notify_seller( $product_id, $reason, 'deleted' );\n        }\n\n        \/\/ Log before deletion since the post won't exist after.\n        Logger::log( $product_id, 'deleted', 0, get_current_user_id() );\n\n        $deleted = wp_delete_post( $product_id, true );\n\n        if ( $deleted ) {\n            wp_send_json_success( 'Auction permanently deleted.' );\n        } else {\n            wp_send_json_error( 'Failed to delete the auction product.' );\n        }\n    }\n\n    private static function notify_seller( int $product_id, string $reason, string $action ): void {\n        $product = wc_get_product( $product_id );\n        if ( ! $product ) {\n            return;\n        }\n\n        $author_id = get_post_field( 'post_author', $product_id );\n        $seller    = get_user_by( 'id', $author_id );\n        if ( ! $seller || ! $seller->user_email ) {\n            return;\n        }\n\n        $action_label = 'deleted' === $action ? __( 'deleted', 'kloktion-dutch-auction' ) : __( 'stopped', 'kloktion-dutch-auction' );\n        $subject      = sprintf(\n            __( 'Your auction \"%s\" has been %s', 'kloktion-dutch-auction' ),\n            $product->get_name(),\n            $action_label\n        );\n        $message = sprintf(\n            __( \"Hello %s,\\n\\nYour auction \\\"%s\\\" has been %s by the site administrator.\\n\\nReason: %s\\n\\nIf you have questions, please contact the marketplace support.\\n\\nRegards,\\n%s\", 'kloktion-dutch-auction' ),\n            $seller->display_name,\n            $product->get_name(),\n            $action_label,\n            $reason,\n            get_bloginfo( 'name' )\n        );\n\n        wp_mail( $seller->user_email, $subject, $message );\n    }\n\n    public static function add_log_metabox(): void {\n        add_meta_box(\n            'kloktion_auction_log',\n            __( 'Auction Log', 'kloktion-dutch-auction' ),\n            [ __CLASS__, 'render_log_metabox' ],\n            'product',\n            'normal',\n            'low'\n        );\n    }\n\n    public static function render_log_metabox( $post ): void {\n        $product = wc_get_product( $post->ID );\n        if ( ! $product instanceof Product_Type ) {\n            echo '<p>' . esc_html__( 'This is not a Dutch Auction product.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        $logs = Logger::get_log( $post->ID, 30 );\n\n        if ( empty( $logs ) ) {\n            echo '<p>' . esc_html__( 'No auction events logged yet.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        echo '<table class=\"widefat striped\"><thead><tr>';\n        echo '<th>' . esc_html__( 'Date', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Event', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Price', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'User', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<\/tr><\/thead><tbody>';\n\n        foreach ( $logs as $log ) {\n            $user = $log->user_id ? get_user_by( 'id', $log->user_id ) : null;\n            echo '<tr>';\n            echo '<td>' . esc_html( $log->created_at ) . '<\/td>';\n            echo '<td><code>' . esc_html( $log->event ) . '<\/code><\/td>';\n            echo '<td>' . ( $log->price_at_event ? wp_kses_post( wc_price( $log->price_at_event ) ) : '\u2014' ) . '<\/td>';\n            echo '<td>' . esc_html( $user ? $user->display_name : ( $log->user_id ?: '\u2014' ) ) . '<\/td>';\n            echo '<\/tr>';\n        }\n\n        echo '<\/tbody><\/table>';\n    }\n\n    public static function render_dashboard(): void {\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/dashboard.php';\n    }\n\n    public static function render_moderation_queue(): void {\n        global $wpdb;\n\n        $table        = $wpdb->prefix . 'kloktion_moderation_queue';\n        $pending_items = $wpdb->get_results(\n            \"SELECT * FROM {$table} WHERE status = 'pending' ORDER BY submitted_at DESC\"\n        );\n\n        require KLOKTION_PLUGIN_DIR . 'admin\/views\/moderation-queue.php';\n    }\n\n    public static function ajax_moderation_approve(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id    = (int) $row->product_id;\n        $submitted_data = json_decode( $row->submitted_data, true );\n\n        \/\/ Stale queue guard: the product may have moved past pending_review (e.g. sold while in queue).\n        $current_kloktion_status = get_post_meta( $product_id, '_kloktion_status', true );\n        $terminal_states = [ 'sold', 'active', 'paused', 'processing', 'expired' ];\n        if ( in_array( $current_kloktion_status, $terminal_states, true ) ) {\n            \/\/ Clean up the orphan queue row.\n            $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n            wp_send_json_error( sprintf(\n                'Product is no longer eligible for moderation (current status: %s). Queue row removed.',\n                $current_kloktion_status\n            ) );\n        }\n\n        \/\/ Apply each meta key\/value from submitted data (blacklist managed fields).\n        if ( is_array( $submitted_data ) ) {\n            $blacklist = [ '_kloktion_status' ]; \/\/ managed separately via transition_status\n            foreach ( $submitted_data as $meta_key => $meta_value ) {\n                $key = sanitize_key( $meta_key );\n                if ( in_array( $key, $blacklist, true ) ) {\n                    continue;\n                }\n                \/\/ Normalize _kloktion_is_auction to '1' (force_auction_product_type does strict === '1' check).\n                if ( '_kloktion_is_auction' === $key && in_array( $meta_value, [ 'yes', 'true', true, 1 ], true ) ) {\n                    $meta_value = '1';\n                }\n                update_post_meta( $product_id, $key, $meta_value );\n            }\n        }\n\n        \/\/ Ensure _kloktion_status is 'pending_review' before transitioning so the\n        \/\/ valid_transitions table always has a matching entry. Without this, if submitted_data\n        \/\/ overwrote the status to something unexpected (or the meta was missing) the\n        \/\/ transition would silently return false and the status would stay wrong.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Determine target status based on start_time.\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        if ( $start_time <= 0 ) {\n            \/\/ No start date submitted (vendor form has no date picker) \u2192 start now.\n            $start_time = time();\n            update_post_meta( $product_id, '_kloktion_start_time', $start_time );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_time + $duration );\n            }\n            $new_status = 'active';\n        } else {\n            $new_status = ( $start_time <= time() ) ? 'active' : 'scheduled';\n        }\n        Auction_Engine::transition_status( $product_id, $new_status );\n\n        \/\/ Publish the WC post so it appears on the shop page and in the vendor dashboard.\n        \/\/ Vendor-submitted products land as 'pending'; approving must flip them to 'publish'.\n        \/\/ We call wp_update_post directly here (admin context, no Dokan hooks involved).\n        $post = get_post( $product_id );\n        if ( $post && 'publish' !== $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'publish',\n            ] );\n        }\n\n        \/\/ Restore catalog visibility (sync_catalog_visibility hook only fires when transitioning\n        \/\/ OUT of sold\/expired\/stopped \u2014 but for first-time approval from pending_review, that\n        \/\/ listener is a no-op, so set it explicitly).\n        $product_obj = wc_get_product( $product_id );\n        if ( $product_obj ) {\n            $product_obj->set_catalog_visibility( 'visible' );\n            $product_obj->save();\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'approved',\n                'admin_id'   => get_current_user_id(),\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_approved', $product_id );\n\n        wp_send_json_success( [ 'message' => __( 'Auction approved and scheduled.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_moderation_reject(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        $reason   = isset( $_POST['reason'] ) ? sanitize_textarea_field( wp_unslash( $_POST['reason'] ) ) : '';\n\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n        if ( empty( $reason ) ) {\n            wp_send_json_error( 'Rejection reason is required.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id = (int) $row->product_id;\n\n        \/\/ Transition product back to stopped.\n        Auction_Engine::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => $reason,\n            '_kloktion_stop_by'     => get_current_user_id(),\n        ] );\n\n        \/\/ If product was never published (vendor's first submission), move to draft so the\n        \/\/ vendor can find, edit, and resubmit. Otherwise leave post_status as-is.\n        $post = get_post( $product_id );\n        if ( $post && 'pending' === $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'draft',\n            ] );\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'rejected',\n                'admin_id'   => get_current_user_id(),\n                'notes'      => $reason,\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_rejected', $product_id, $reason );\n\n        wp_send_json_success( [ 'message' => __( 'Auction rejected.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_disputes_page(): void {\n        global $wpdb;\n        $disputes_table = $wpdb->prefix . 'kloktion_disputes';\n        $escrow_table   = $wpdb->prefix . 'kloktion_escrow';\n\n        \/\/ Handle view detail \/ resolve actions.\n        $view_id = isset( $_GET['view'] ) ? (int) $_GET['view'] : 0;\n\n        if ( $view_id > 0 ) {\n            $dispute = $wpdb->get_row( $wpdb->prepare(\n                \"SELECT d.*, e.amount, e.currency, e.vendor_id, e.product_id, e.charge_id, e.status as escrow_status\n                 FROM $disputes_table d\n                 LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n                 WHERE d.id = %d\",\n                $view_id\n            ) );\n            if ( ! $dispute ) {\n                echo '<div class=\"wrap\"><h1>' . esc_html__( 'Dispute not found', 'kloktion-dutch-auction' ) . '<\/h1><\/div>';\n                return;\n            }\n            include KLOKTION_PLUGIN_DIR . 'admin\/views\/dispute-detail.php';\n            return;\n        }\n\n        \/\/ List view \u2014 open disputes first, then resolved.\n        $disputes = $wpdb->get_results(\n            \"SELECT d.*, e.amount, e.currency, e.vendor_id\n             FROM $disputes_table d\n             LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n             ORDER BY CASE d.status WHEN 'open' THEN 0 ELSE 1 END, d.created_at DESC\n             LIMIT 100\"\n        );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/disputes-list.php';\n    }\n\n    public static function ajax_dispute_resolve_release(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Release escrow (funds go to seller).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            \\Kloktion\\Stripe_Payment::release_escrow( $dispute->escrow_id, 'admin_release' );\n        }\n\n        \/\/ Mark dispute resolved.\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_release',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_release', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Dispute resolved \u2014 funds released to seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_dispute_resolve_refund(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Refund via Stripe (reverses the destination charge).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            $refund = \\Kloktion\\Stripe_Payment::refund_payment( $dispute->escrow_id, $notes );\n            if ( is_wp_error( $refund ) ) {\n                wp_send_json_error( [ 'message' => 'Refund failed: ' . $refund->get_error_message() ] );\n            }\n        }\n\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_refund',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_refund', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Buyer refunded \u2014 funds reversed from seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/**\n     * R12: Manually release a stuck pending_purchase lot and restart the auction.\n     *\/\n    public static function ajax_release_pending(): void {\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $nonce      = isset( $_POST['nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';\n        $reason     = isset( $_POST['reason'] ) ? sanitize_key( wp_unslash( $_POST['reason'] ) ) : 'admin_decision';\n\n        if ( ! $product_id || ! wp_verify_nonce( $nonce, 'kloktion_release_pending_' . $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => __( 'Permission denied.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        \/\/ FIX A1: Atomic SQL claim \u2014 replaces in-process wp_cache_add lock.\n        \/\/ Only ONE caller can flip pending_purchase \u2192 releasing; concurrent requests get 409.\n        global $wpdb;\n        $rows = $wpdb->query( $wpdb->prepare(\n            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n            'releasing',\n            $product_id,\n            '_kloktion_status',\n            'pending_purchase'\n        ) );\n        if ( 1 !== (int) $rows ) {\n            wp_send_json_error( [ 'message' => __( 'Auction state changed. Reload and retry.', 'kloktion-dutch-auction' ) ], 409 );\n        }\n        \/\/ Flush WP object cache so subsequent get_post_meta reads reflect 'releasing'.\n        wp_cache_delete( $product_id, 'post_meta' );\n\n        \/\/ Whitelist reason values.\n        $allowed_reasons = [ 'penalty_unpaid', 'seller_request', 'admin_decision' ];\n        if ( ! in_array( $reason, $allowed_reasons, true ) ) {\n            $reason = 'admin_decision';\n        }\n\n        \/\/ Cancel pending order.\n        $order_id = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n        if ( $order_id && function_exists( 'wc_get_order' ) ) {\n            $order = wc_get_order( $order_id );\n            if ( $order ) {\n                \/\/ Marker is written UNCONDITIONALLY so late async webhooks on already-cancelled\/failed\n                \/\/ orders still hit the checkout-handler guard and cannot re-trigger the sale.\n                $order->update_meta_data( '_kloktion_released_by_admin', '1' );\n                $order->update_meta_data( '_kloktion_release_reason', $reason );\n                $order->save();\n\n                if ( ! in_array( $order->get_status(), [ 'cancelled', 'refunded', 'failed' ], true ) ) {\n                    $cancel_result = $order->update_status(\n                        'cancelled',\n                        sprintf(\n                            \/* translators: %s: reason key *\/\n                            __( 'Admin released pending purchase. Reason: %s', 'kloktion-dutch-auction' ),\n                            $reason\n                        )\n                    );\n                    if ( ! $cancel_result ) {\n                        \/\/ Rollback: restore pending_purchase so admin can retry.\n                        $wpdb->query( $wpdb->prepare(\n                            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                            'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n                        ) );\n                        wp_cache_delete( $product_id, 'post_meta' );\n                        wp_send_json_error( [ 'message' => __( 'Failed to cancel the pending order. No changes made.', 'kloktion-dutch-auction' ) ], 500 );\n                    }\n                }\n            }\n        }\n\n        \/\/ Clear pending meta.\n        delete_post_meta( $product_id, '_kloktion_pending_user' );\n        delete_post_meta( $product_id, '_kloktion_pending_order' );\n        delete_post_meta( $product_id, '_kloktion_pending_price' );\n        delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n\n        \/\/ Reset auction price + time.\n        $start_price = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $duration    = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n        $now         = time();\n\n        if ( $start_price <= 0 ) {\n            \/\/ Rollback: cannot restart without a valid start price.\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Auction has no start price configured. Cannot restart.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_current_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_start_time', $now );\n        if ( $duration > 0 ) {\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n        }\n\n        \/\/ Transition status: releasing \u2192 active (via transition table).\n        $transitioned = \\Kloktion\\Auction_Engine::transition_status( $product_id, 'active', [] );\n        if ( ! $transitioned ) {\n            \/\/ Rollback: transition blocked (edge case \u2014 status may have been mutated externally).\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Transition to active failed. Auction status restored. Reload and retry.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        \/\/ Log the admin action.\n        Logger::log(\n            $product_id,\n            'admin_release_pending',\n            $start_price,\n            get_current_user_id(),\n            [ 'reason' => $reason, 'cancelled_order' => $order_id ]\n        );\n\n        wp_send_json_success( [ 'message' => __( 'Auction released and restarted.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_settings(): void {\n        if ( isset( $_POST['kloktion_settings_nonce'] ) && wp_verify_nonce( $_POST['kloktion_settings_nonce'], 'kloktion_save_settings' ) && current_user_can( 'manage_woocommerce' ) ) {\n            $settings = [\n                'global_pause'            => ! empty( $_POST['global_pause'] ) ? 1 : 0,\n                'default_duration'        => absint( $_POST['default_duration'] ?? 86400 ),\n                'pause_duration'          => absint( $_POST['pause_duration'] ?? 180 ),\n                'freeze_timeout'          => absint( $_POST['freeze_timeout'] ?? 600 ),\n                'rate_limit'              => absint( $_POST['rate_limit'] ?? 60 ),\n                'poll_interval'           => absint( $_POST['poll_interval'] ?? 2 ),\n                'processing_timeout'      => absint( $_POST['processing_timeout'] ?? 900 ),\n                'moderation_enabled'      => ! empty( $_POST['moderation_enabled'] ) ? 1 : 0,\n                'escrow_enabled'          => ! empty( $_POST['escrow_enabled'] ) ? 1 : 0,\n                'stripe_platform_secret'  => sanitize_text_field( $_POST['stripe_platform_secret'] ?? '' ),\n                'stripe_webhook_secret'   => sanitize_text_field( $_POST['stripe_webhook_secret'] ?? '' ),\n                'commission_percent'      => max( 0, min( 100, (float) ( $_POST['commission_percent'] ?? 10 ) ) ),\n                'dispute_window_days'     => max( 1, min( 60, (int) ( $_POST['dispute_window_days'] ?? 7 ) ) ),\n                'auto_release_days'       => max( 1, min( 60, (int) ( $_POST['auto_release_days'] ?? 10 ) ) ),\n            ];\n            update_option( 'kloktion_settings', $settings );\n            \/\/ reCAPTCHA keys stored as standalone options (not inside $settings array).\n            update_option( 'kloktion_recaptcha_site_key', sanitize_text_field( $_POST['kloktion_recaptcha_site_key'] ?? '' ) );\n            update_option( 'kloktion_recaptcha_secret_key', sanitize_text_field( $_POST['kloktion_recaptcha_secret_key'] ?? '' ) );\n            echo '<div class=\"updated\"><p>' . esc_html__( 'Settings saved.', 'kloktion-dutch-auction' ) . '<\/p><\/div>';\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/settings.php';\n    }\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Auction_Engine {\n\n    private static $valid_transitions = [\n        'scheduled'        => [ 'active', 'stopped', 'pending_review' ],\n        'active'           => [ 'paused', 'sold', 'stopped', 'processing', 'expired' ],\n        'paused'           => [ 'sold', 'expired', 'stopped', 'processing' ],\n        'processing'       => [ 'sold', 'active', 'paused', 'stopped', 'pending_purchase' ],\n        'pending_purchase' => [ 'sold', 'expired', 'stopped', 'active', 'paused', 'releasing' ],\n        'releasing'        => [ 'active', 'pending_purchase' ],\n        'expired'          => [ 'active', 'scheduled', 'pending_review' ],\n        'stopped'          => [ 'active', 'scheduled', 'pending_review' ],\n        'pending_review'   => [ 'active', 'scheduled', 'stopped' ],\n    ];\n\n    public static function calculate_price( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $frozen = get_post_meta( $product_id, '_kloktion_pending_price', true );\n            return '' !== $frozen ? (float) $frozen : (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        if ( ! in_array( $status, [ 'active', 'processing' ], true ) ) {\n            return (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        $start_price   = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $start_time    = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration      = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return $start_price;\n        }\n\n        $elapsed = time() - $start_time;\n\n        if ( $elapsed <= 0 ) {\n            return $start_price;\n        }\n\n        if ( $elapsed >= $duration ) {\n            return $reserve_price;\n        }\n\n        $price = $start_price - ( ( $start_price - $reserve_price ) * ( $elapsed \/ $duration ) );\n        return round( max( $price, $reserve_price ), 2 );\n    }\n\n    public static function get_status( int $product_id ): string {\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        return $status ?: 'scheduled';\n    }\n\n    public static function get_time_remaining( int $product_id ): int {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            $remaining   = $pause_dur - ( time() - $pause_start );\n            return max( 0, $remaining );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $deadline = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n            return $deadline > 0 ? max( 0, $deadline - time() ) : 0;\n        }\n\n        if ( 'active' === $status || 'processing' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $remaining  = ( $start_time + $duration ) - time();\n            return max( 0, $remaining );\n        }\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            return max( 0, $start_time - time() );\n        }\n\n        return 0;\n    }\n\n    public static function get_progress( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'active' !== $status && 'processing' !== $status ) {\n            return 0.0;\n        }\n\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return 0.0;\n        }\n\n        $elapsed  = time() - $start_time;\n        $progress = $elapsed \/ $duration;\n\n        return round( max( 0.0, min( 1.0, $progress ) ), 4 );\n    }\n\n    public static function transition_status( int $product_id, string $new_status, array $meta = [] ): bool {\n        $current = self::get_status( $product_id );\n\n        \/\/ Already in target status \u2014 skip but don't update meta (prevents double-sell overwriting sold_to).\n        if ( $current === $new_status ) {\n            return false;\n        }\n\n        $allowed = self::$valid_transitions[ $current ] ?? [];\n        if ( ! in_array( $new_status, $allowed, true ) ) {\n            return false;\n        }\n\n        update_post_meta( $product_id, '_kloktion_status', $new_status );\n\n        foreach ( $meta as $key => $value ) {\n            update_post_meta( $product_id, $key, $value );\n        }\n\n        $price = self::calculate_price( $product_id );\n        Logger::log( $product_id, $new_status, $price, get_current_user_id() ?: null, $meta );\n\n        do_action( 'kloktion_auction_' . $new_status, $product_id );\n        do_action( 'kloktion_status_changed', $product_id, $new_status, $current );\n\n        \/\/ Invalidate API cache.\n        delete_transient( 'kloktion_api_' . $product_id );\n\n        return true;\n    }\n\n    public static function start_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'active', [\n            '_kloktion_start_time' => time(),\n        ] );\n    }\n\n    public static function pause_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'paused', [\n            '_kloktion_pause_start' => time(),\n        ] );\n    }\n\n    public static function expire_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'expired' );\n    }\n\n    public static function stop_auction( int $product_id, int $admin_id, string $reason ): bool {\n        return self::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => sanitize_text_field( $reason ),\n            '_kloktion_stop_by'     => $admin_id,\n        ] );\n    }\n\n    public static function sell_auction( int $product_id, int $buyer_id, float $price ): bool {\n        return self::transition_status( $product_id, 'sold', [\n            '_kloktion_sold_price' => $price,\n            '_kloktion_sold_to'    => $buyer_id,\n            '_kloktion_sold_at'    => time(),\n        ] );\n    }\n\n    public static function mark_pending_purchase( int $product_id, int $buyer_id, int $order_id, float $price ): bool {\n        $deadline = time() + ( 96 * HOUR_IN_SECONDS );\n\n        return self::transition_status( $product_id, 'pending_purchase', [\n            '_kloktion_pending_user'     => $buyer_id,\n            '_kloktion_pending_order'    => $order_id,\n            '_kloktion_pending_price'    => $price,\n            '_kloktion_payment_deadline' => $deadline,\n        ] );\n    }\n\n    public static function check_auction( int $product_id ): void {\n        $status = self::get_status( $product_id );\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            if ( $start_time > 0 && $start_time <= time() ) {\n                self::transition_status( $product_id, 'active' );\n            }\n        } elseif ( 'active' === $status ) {\n            $price      = self::calculate_price( $product_id );\n            $reserve    = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $time_up    = $duration > 0 && time() >= $start_time + $duration;\n\n            if ( $reserve > 0 && $price <= $reserve ) {\n                self::pause_auction( $product_id );\n            } elseif ( $time_up ) {\n                \/\/ Duration exceeded: expire directly (no-reserve) or expire if stuck.\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            if ( time() - $pause_start >= $pause_dur ) {\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'pending_purchase' === $status ) {\n            \/\/ The buyer owns a 96-hour payment window. Penalty handling is done by\n            \/\/ check_unpaid_wins(); keep the auction unavailable until admin\/vendor action.\n            return;\n        } elseif ( 'processing' === $status ) {\n            $since    = (int) get_post_meta( $product_id, '_kloktion_processing_since', true );\n            $settings = get_option( 'kloktion_settings', [] );\n            $timeout  = (int) ( $settings['processing_timeout'] ?? 300 );\n            if ( time() - $since >= $timeout ) {\n                $was_paused = self::calculate_price( $product_id ) <= (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n                $restore    = $was_paused ? 'paused' : 'active';\n\n                if ( 'paused' === $restore ) {\n                    \/\/ reset pause_start for expiry timer\n                    self::transition_status( $product_id, 'paused', [\n                        '_kloktion_pause_start' => time(),\n                    ] );\n                } else {\n                    self::transition_status( $product_id, 'active' );\n                }\n\n                delete_post_meta( $product_id, '_kloktion_processing_user' );\n                delete_post_meta( $product_id, '_kloktion_processing_since' );\n            }\n        }\n    }\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Auction_Engine {\n\n    private static $valid_transitions = [\n        'scheduled'        => [ 'active', 'stopped', 'pending_review' ],\n        'active'           => [ 'paused', 'sold', 'stopped', 'processing', 'expired' ],\n        'paused'           => [ 'sold', 'expired', 'stopped', 'processing' ],\n        'processing'       => [ 'sold', 'active', 'paused', 'stopped', 'pending_purchase' ],\n        'pending_purchase' => [ 'sold', 'expired', 'stopped', 'active', 'paused', 'releasing' ],\n        'releasing'        => [ 'active', 'pending_purchase' ],\n        'expired'          => [ 'active', 'scheduled', 'pending_review' ],\n        'stopped'          => [ 'active', 'scheduled', 'pending_review' ],\n        'pending_review'   => [ 'active', 'scheduled', 'stopped' ],\n    ];\n\n    public static function calculate_price( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $frozen = get_post_meta( $product_id, '_kloktion_pending_price', true );\n            return '' !== $frozen ? (float) $frozen : (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        if ( ! in_array( $status, [ 'active', 'processing' ], true ) ) {\n            return (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        $start_price   = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $start_time    = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration      = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return $start_price;\n        }\n\n        $elapsed = time() - $start_time;\n\n        if ( $elapsed <= 0 ) {\n            return $start_price;\n        }\n\n        if ( $elapsed >= $duration ) {\n            return $reserve_price;\n        }\n\n        $price = $start_price - ( ( $start_price - $reserve_price ) * ( $elapsed \/ $duration ) );\n        return round( max( $price, $reserve_price ), 2 );\n    }\n\n    public static function get_status( int $product_id ): string {\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        return $status ?: 'scheduled';\n    }\n\n    public static function get_time_remaining( int $product_id ): int {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            $remaining   = $pause_dur - ( time() - $pause_start );\n            return max( 0, $remaining );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $deadline = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n            return $deadline > 0 ? max( 0, $deadline - time() ) : 0;\n        }\n\n        if ( 'active' === $status || 'processing' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $remaining  = ( $start_time + $duration ) - time();\n            return max( 0, $remaining );\n        }\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            return max( 0, $start_time - time() );\n        }\n\n        return 0;\n    }\n\n    public static function get_progress( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'active' !== $status && 'processing' !== $status ) {\n            return 0.0;\n        }\n\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return 0.0;\n        }\n\n        $elapsed  = time() - $start_time;\n        $progress = $elapsed \/ $duration;\n\n        return round( max( 0.0, min( 1.0, $progress ) ), 4 );\n    }\n\n    public static function transition_status( int $product_id, string $new_status, array $meta = [] ): bool {\n        $current = self::get_status( $product_id );\n\n        \/\/ Already in target status \u2014 skip but don't update meta (prevents double-sell overwriting sold_to).\n        if ( $current === $new_status ) {\n            return false;\n        }\n\n        $allowed = self::$valid_transitions[ $current ] ?? [];\n        if ( ! in_array( $new_status, $allowed, true ) ) {\n            return false;\n        }\n\n        update_post_meta( $product_id, '_kloktion_status', $new_status );\n\n        foreach ( $meta as $key => $value ) {\n            update_post_meta( $product_id, $key, $value );\n        }\n\n        $price = self::calculate_price( $product_id );\n        Logger::log( $product_id, $new_status, $price, get_current_user_id() ?: null, $meta );\n\n        do_action( 'kloktion_auction_' . $new_status, $product_id );\n        do_action( 'kloktion_status_changed', $product_id, $new_status, $current );\n\n        \/\/ Invalidate API cache.\n        delete_transient( 'kloktion_api_' . $product_id );\n\n        return true;\n    }\n\n    public static function start_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'active', [\n            '_kloktion_start_time' => time(),\n        ] );\n    }\n\n    public static function pause_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'paused', [\n            '_kloktion_pause_start' => time(),\n        ] );\n    }\n\n    public static function expire_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'expired' );\n    }\n\n    public static function stop_auction( int $product_id, int $admin_id, string $reason ): bool {\n        return self::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => sanitize_text_field( $reason ),\n            '_kloktion_stop_by'     => $admin_id,\n        ] );\n    }\n\n    public static function sell_auction( int $product_id, int $buyer_id, float $price ): bool {\n        return self::transition_status( $product_id, 'sold', [\n            '_kloktion_sold_price' => $price,\n            '_kloktion_sold_to'    => $buyer_id,\n            '_kloktion_sold_at'    => time(),\n        ] );\n    }\n\n    public static function mark_pending_purchase( int $product_id, int $buyer_id, int $order_id, float $price ): bool {\n        $deadline = time() + ( 96 * HOUR_IN_SECONDS );\n\n        return self::transition_status( $product_id, 'pending_purchase', [\n            '_kloktion_pending_user'     => $buyer_id,\n            '_kloktion_pending_order'    => $order_id,\n            '_kloktion_pending_price'    => $price,\n            '_kloktion_payment_deadline' => $deadline,\n        ] );\n    }\n\n    public static function check_auction( int $product_id ): void {\n        $status = self::get_status( $product_id );\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            if ( $start_time > 0 && $start_time <= time() ) {\n                self::transition_status( $product_id, 'active' );\n            }\n        } elseif ( 'active' === $status ) {\n            $price      = self::calculate_price( $product_id );\n            $reserve    = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $time_up    = $duration > 0 && time() >= $start_time + $duration;\n\n            if ( $reserve > 0 && $price <= $reserve ) {\n                self::pause_auction( $product_id );\n            } elseif ( $time_up ) {\n                \/\/ Duration exceeded: expire directly (no-reserve) or expire if stuck.\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            if ( time() - $pause_start >= $pause_dur ) {\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'pending_purchase' === $status ) {\n            \/\/ The buyer owns a 96-hour payment window. Penalty handling is done by\n            \/\/ check_unpaid_wins(); keep the auction unavailable until admin\/vendor action.\n            return;\n        } elseif ( 'processing' === $status ) {\n            $since    = (int) get_post_meta( $product_id, '_kloktion_processing_since', true );\n            $settings = get_option( 'kloktion_settings', [] );\n            $timeout  = (int) ( $settings['processing_timeout'] ?? 300 );\n            if ( time() - $since >= $timeout ) {\n                $was_paused = self::calculate_price( $product_id ) <= (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n                $restore    = $was_paused ? 'paused' : 'active';\n\n                if ( 'paused' === $restore ) {\n                    \/\/ reset pause_start for expiry timer\n                    self::transition_status( $product_id, 'paused', [\n                        '_kloktion_pause_start' => time(),\n                    ] );\n                } else {\n                    self::transition_status( $product_id, 'active' );\n                }\n\n                delete_post_meta( $product_id, '_kloktion_processing_user' );\n                delete_post_meta( $product_id, '_kloktion_processing_since' );\n            }\n        }\n    }\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Checkout_Handler {\n\n    public static function init(): void {\n        add_action( 'woocommerce_checkout_process', [ __CLASS__, 'validate_checkout' ] );\n        add_action( 'woocommerce_after_checkout_validation', [ __CLASS__, 'release_locks_on_error' ], 10, 2 );\n        add_action( 'woocommerce_checkout_create_order_line_item', [ __CLASS__, 'add_order_item_meta' ], 10, 4 );\n        add_action( 'woocommerce_payment_complete', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_failed', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_cancelled', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_completed', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_processing', [ __CLASS__, 'handle_payment_complete' ] );\n\n        \/\/ prevent double-sell on order-pay\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'validate_order_pay' ] );\n\n        \/\/ Show payment method on thank-you page for auction orders.\n        add_action( 'woocommerce_order_details_after_order_table', [ __CLASS__, 'show_payment_method' ] );\n\n        \/\/ Show auction notice on order-pay page.\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'show_order_pay_notice' ], 5 );\n    }\n\n    public static function acquire_lock( int $product_id, int $user_id ): bool {\n        global $wpdb;\n\n        $affected = $wpdb->query(\n            $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta}\n                 SET meta_value = 'processing'\n                 WHERE post_id = %d\n                   AND meta_key = '_kloktion_status'\n                   AND meta_value IN ('active', 'paused')\",\n                $product_id\n            )\n        );\n\n        if ( 1 === $affected ) {\n            \/\/ Flush WP object cache after direct SQL so get_post_meta reads fresh data.\n            wp_cache_delete( $product_id, 'post_meta' );\n\n            update_post_meta( $product_id, '_kloktion_processing_user', $user_id );\n            update_post_meta( $product_id, '_kloktion_processing_since', time() );\n\n            Logger::log( $product_id, 'lock_acquired', Auction_Engine::calculate_price( $product_id ), $user_id );\n            delete_transient( 'kloktion_api_' . $product_id );\n\n            return true;\n        }\n\n        return false;\n    }\n\n    public static function release_lock( int $product_id ): void {\n        $reserve = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $price   = Auction_Engine::calculate_price( $product_id );\n\n        \/\/ Determine what status to restore.\n        $restore = ( $price <= $reserve ) ? 'paused' : 'active';\n\n        \/\/ Direct update to bypass transition validation (processing \u2192 active\/paused).\n        update_post_meta( $product_id, '_kloktion_status', $restore );\n\n        if ( 'paused' === $restore && ! get_post_meta( $product_id, '_kloktion_pause_start', true ) ) {\n            update_post_meta( $product_id, '_kloktion_pause_start', time() );\n        }\n\n        delete_post_meta( $product_id, '_kloktion_processing_user' );\n        delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n        Logger::log( $product_id, 'lock_released', $price );\n        delete_transient( 'kloktion_api_' . $product_id );\n    }\n\n    \/\/ acquire locks; release all on failure\n    public static function validate_checkout(): void {\n        if ( ! WC()->cart ) {\n            return;\n        }\n\n        $user_id      = get_current_user_id();\n        $locked_ids   = [];\n\n        foreach ( WC()->cart->get_cart() as $key => $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n\n            if ( ! self::acquire_lock( $product_id, $user_id ?: 0 ) ) {\n                foreach ( $locked_ids as $locked_id ) {\n                    self::release_lock( $locked_id );\n                }\n\n                throw new \\Exception(\n                    sprintf(\n                        __( 'Sorry, the auction for \"%s\" has already been purchased by another buyer.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n            }\n\n            $locked_ids[] = $product_id;\n        }\n    }\n\n    \/**\n     * Release any auction locks if WC checkout validation produced errors.\n     * Prevents orphaned locks when a required field is missing.\n     *\/\n    public static function release_locks_on_error( array $data, \\WP_Error $errors ): void {\n        if ( ! $errors->has_errors() || ! WC()->cart ) {\n            return;\n        }\n\n        foreach ( WC()->cart->get_cart() as $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n            $status     = Auction_Engine::get_status( $product_id );\n\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === get_current_user_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function validate_order_pay(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n            $current_user    = get_current_user_id();\n\n            if ( in_array( $status, [ 'sold', 'expired', 'stopped' ], true ) ) {\n                $order->update_status( 'cancelled', __( 'Auction is no longer available.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'This auction has already ended. Your order has been cancelled.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $deadline      = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n\n                if ( $pending_order === $order_id && $pending_user === $current_user && ( ! $deadline || $deadline >= time() ) ) {\n                    continue;\n                }\n\n                wc_add_notice( __( 'This auction payment window is no longer available.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            \/\/ Block payment unless this user currently holds the processing lock.\n            \/\/ Covers: lock expired and auction returned to active\/paused, or another user holds it.\n            if ( 'processing' !== $status || $processing_user !== $current_user ) {\n                $order->update_status( 'cancelled', __( 'Your price lock has expired. Order cancelled.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'Your price lock has expired. Please add the item to your cart again.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n        }\n    }\n\n    public static function add_order_item_meta( $item, $cart_item_key, $values, $order ): void {\n        if ( ! isset( $values['kloktion_frozen_price'] ) ) {\n            return;\n        }\n\n        $start_price = (float) get_post_meta( $values['kloktion_product_id'], '_kloktion_start_price', true );\n        $frozen      = (float) $values['kloktion_frozen_price'];\n        $savings     = $start_price - $frozen;\n        $pct         = $start_price > 0 ? round( ( $savings \/ $start_price ) * 100, 1 ) : 0;\n\n        $item->add_meta_data( '_kloktion_frozen_price', $frozen );\n        $item->add_meta_data( '_kloktion_start_price', $start_price );\n        $item->add_meta_data( '_kloktion_savings', $savings );\n        $item->add_meta_data( '_kloktion_savings_percent', $pct );\n        $item->add_meta_data( '_kloktion_product_id', (int) $values['kloktion_product_id'] );\n    }\n\n    public static function handle_payment_complete( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        \/\/ already processed\n        if ( $order->get_meta( '_kloktion_sale_finalized' ) ) {\n            return;\n        }\n\n        \/\/ FIX A2: Block late async payments (SEPA \/ 3DS retry) for orders released by admin.\n        \/\/ An admin may release a stuck pending_purchase, cancel the order, and restart the\n        \/\/ auction. A delayed payment webhook for the OLD cancelled order must not re-sell the lot.\n        \/\/ If the payment actually settled, auto-refund the customer.\n        if ( '1' === (string) $order->get_meta( '_kloktion_released_by_admin' ) ) {\n            $reason = (string) $order->get_meta( '_kloktion_release_reason' );\n            \/\/ Determine product_id for logging (best-effort from first auction item).\n            $product_id = 0;\n            foreach ( $order->get_items() as $_item ) {\n                $_pid = (int) $_item->get_meta( '_kloktion_product_id' );\n                if ( $_pid ) {\n                    $product_id = $_pid;\n                    break;\n                }\n            }\n            \/\/ Refund the customer if the payment actually settled.\n            if ( $order->is_paid() && function_exists( 'wc_create_refund' ) ) {\n                $refund = wc_create_refund( [\n                    'amount'         => $order->get_total(),\n                    'reason'         => sprintf(\n                        \/* translators: %s: release reason key *\/\n                        __( 'Auction released by admin (%s) before payment settled.', 'kloktion-dutch-auction' ),\n                        $reason\n                    ),\n                    'order_id'       => $order->get_id(),\n                    'refund_payment' => true,\n                    'restock_items'  => false,\n                ] );\n                if ( is_wp_error( $refund ) ) {\n                    $order->update_status( 'failed', sprintf(\n                        \/* translators: %s: error message *\/\n                        __( 'Released-order auto-refund failed: %s. Manual refund required.', 'kloktion-dutch-auction' ),\n                        $refund->get_error_message()\n                    ) );\n                    if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                        \\Kloktion\\Logger::log( $product_id, 'released_order_refund_failed', null, $order->get_user_id(), [\n                            'order_id' => $order->get_id(),\n                            'error'    => $refund->get_error_message(),\n                        ] );\n                    }\n                } else {\n                    if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                        \\Kloktion\\Logger::log( $product_id, 'released_order_refunded', (float) $order->get_total(), $order->get_user_id(), [\n                            'order_id'  => $order->get_id(),\n                            'refund_id' => $refund->get_id(),\n                            'reason'    => $reason,\n                        ] );\n                    }\n                }\n            } else {\n                if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'released_order_payment_rejected', null, $order->get_user_id(), [\n                        'order_id' => $order->get_id(),\n                        'reason'   => $reason,\n                    ] );\n                }\n            }\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            if ( ! in_array( $status, [ 'processing', 'pending_purchase', 'active', 'paused' ], true ) ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" is no longer available (status: %s). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id ),\n                        $status\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', null, $order->get_customer_id(), [\n                    'order_id'       => $order_id,\n                    'auction_status' => $status,\n                ] );\n                return;\n            }\n\n            if ( 'processing' === $status ) {\n                $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                $buyer_id        = $order->get_customer_id();\n                if ( $processing_user && $processing_user !== $buyer_id ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'Another buyer holds the lock for this auction. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $buyer_id      = (int) $order->get_customer_id();\n\n                if ( ( $pending_user && $pending_user !== $buyer_id ) || ( $pending_order && $pending_order !== $order_id ) ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'This auction is reserved for another pending purchase. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            $frozen = (float) $item->get_meta( '_kloktion_frozen_price' );\n            $start  = (float) $item->get_meta( '_kloktion_start_price' );\n            $pct    = (float) $item->get_meta( '_kloktion_savings_percent' );\n\n            $buyer_id = $order->get_customer_id();\n            $sold = Auction_Engine::sell_auction( $product_id, $buyer_id, $frozen );\n\n            if ( ! $sold ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" could not be finalized (already sold or ended). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', $frozen, $buyer_id, [\n                    'order_id' => $order_id,\n                    'reason'   => 'sell_auction_failed',\n                ] );\n                return;\n            }\n\n            $order->add_order_note(\n                sprintf(\n                    __( 'Dutch Auction purchase: %s at %s (started at %s, savings %s%%)', 'kloktion-dutch-auction' ),\n                    get_the_title( $product_id ),\n                    wc_price( $frozen ),\n                    wc_price( $start ),\n                    $pct\n                )\n            );\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n            delete_post_meta( $product_id, '_kloktion_pending_user' );\n            delete_post_meta( $product_id, '_kloktion_pending_order' );\n            delete_post_meta( $product_id, '_kloktion_pending_price' );\n            delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n        }\n\n        $order->update_meta_data( '_kloktion_sale_finalized', time() );\n        $order->save();\n    }\n\n    public static function handle_payment_failed( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === (int) $order->get_customer_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function show_order_pay_notice(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            if ( $item->get_meta( '_kloktion_product_id' ) ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( $has_auction ) {\n            printf(\n                '<div class=\"woocommerce-info kloktion-pay-notice\">%s<\/div>',\n                esc_html__( 'This lot is reserved for you. Please complete payment within 96 hours to avoid a penalty.', 'kloktion-dutch-auction' )\n            );\n        }\n    }\n\n    public static function show_payment_method( $order ): void {\n        if ( ! $order instanceof \\WC_Order ) {\n            return;\n        }\n\n        \/\/ Only show for orders containing auction products.\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            $product = $item->get_product();\n            if ( $product instanceof Product_Type ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( ! $has_auction ) {\n            return;\n        }\n\n        $method = $order->get_payment_method_title();\n        if ( $method ) {\n            printf(\n                '<p class=\"kloktion-payment-method\"><strong>%s<\/strong> %s<\/p>',\n                esc_html__( 'Payment method:', 'kloktion-dutch-auction' ),\n                esc_html( $method )\n            );\n        }\n    }\n\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Checkout_Handler {\n\n    public static function init(): void {\n        add_action( 'woocommerce_checkout_process', [ __CLASS__, 'validate_checkout' ] );\n        add_action( 'woocommerce_after_checkout_validation', [ __CLASS__, 'release_locks_on_error' ], 10, 2 );\n        add_action( 'woocommerce_checkout_create_order_line_item', [ __CLASS__, 'add_order_item_meta' ], 10, 4 );\n        add_action( 'woocommerce_payment_complete', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_failed', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_cancelled', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_completed', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_processing', [ __CLASS__, 'handle_payment_complete' ] );\n\n        \/\/ prevent double-sell on order-pay\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'validate_order_pay' ] );\n\n        \/\/ Show payment method on thank-you page for auction orders.\n        add_action( 'woocommerce_order_details_after_order_table', [ __CLASS__, 'show_payment_method' ] );\n\n        \/\/ Show auction notice on order-pay page.\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'show_order_pay_notice' ], 5 );\n    }\n\n    public static function acquire_lock( int $product_id, int $user_id ): bool {\n        global $wpdb;\n\n        $affected = $wpdb->query(\n            $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta}\n                 SET meta_value = 'processing'\n                 WHERE post_id = %d\n                   AND meta_key = '_kloktion_status'\n                   AND meta_value IN ('active', 'paused')\",\n                $product_id\n            )\n        );\n\n        if ( 1 === $affected ) {\n            \/\/ Flush WP object cache after direct SQL so get_post_meta reads fresh data.\n            wp_cache_delete( $product_id, 'post_meta' );\n\n            update_post_meta( $product_id, '_kloktion_processing_user', $user_id );\n            update_post_meta( $product_id, '_kloktion_processing_since', time() );\n\n            Logger::log( $product_id, 'lock_acquired', Auction_Engine::calculate_price( $product_id ), $user_id );\n            delete_transient( 'kloktion_api_' . $product_id );\n\n            return true;\n        }\n\n        return false;\n    }\n\n    public static function release_lock( int $product_id ): void {\n        $reserve = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $price   = Auction_Engine::calculate_price( $product_id );\n\n        \/\/ Determine what status to restore.\n        $restore = ( $price <= $reserve ) ? 'paused' : 'active';\n\n        \/\/ Direct update to bypass transition validation (processing \u2192 active\/paused).\n        update_post_meta( $product_id, '_kloktion_status', $restore );\n\n        if ( 'paused' === $restore && ! get_post_meta( $product_id, '_kloktion_pause_start', true ) ) {\n            update_post_meta( $product_id, '_kloktion_pause_start', time() );\n        }\n\n        delete_post_meta( $product_id, '_kloktion_processing_user' );\n        delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n        Logger::log( $product_id, 'lock_released', $price );\n        delete_transient( 'kloktion_api_' . $product_id );\n    }\n\n    \/\/ acquire locks; release all on failure\n    public static function validate_checkout(): void {\n        if ( ! WC()->cart ) {\n            return;\n        }\n\n        $user_id      = get_current_user_id();\n        $locked_ids   = [];\n\n        foreach ( WC()->cart->get_cart() as $key => $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n\n            if ( ! self::acquire_lock( $product_id, $user_id ?: 0 ) ) {\n                foreach ( $locked_ids as $locked_id ) {\n                    self::release_lock( $locked_id );\n                }\n\n                throw new \\Exception(\n                    sprintf(\n                        __( 'Sorry, the auction for \"%s\" has already been purchased by another buyer.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n            }\n\n            $locked_ids[] = $product_id;\n        }\n    }\n\n    \/**\n     * Release any auction locks if WC checkout validation produced errors.\n     * Prevents orphaned locks when a required field is missing.\n     *\/\n    public static function release_locks_on_error( array $data, \\WP_Error $errors ): void {\n        if ( ! $errors->has_errors() || ! WC()->cart ) {\n            return;\n        }\n\n        foreach ( WC()->cart->get_cart() as $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n            $status     = Auction_Engine::get_status( $product_id );\n\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === get_current_user_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function validate_order_pay(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n            $current_user    = get_current_user_id();\n\n            if ( in_array( $status, [ 'sold', 'expired', 'stopped' ], true ) ) {\n                $order->update_status( 'cancelled', __( 'Auction is no longer available.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'This auction has already ended. Your order has been cancelled.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $deadline      = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n\n                if ( $pending_order === $order_id && $pending_user === $current_user && ( ! $deadline || $deadline >= time() ) ) {\n                    continue;\n                }\n\n                wc_add_notice( __( 'This auction payment window is no longer available.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            \/\/ Block payment unless this user currently holds the processing lock.\n            \/\/ Covers: lock expired and auction returned to active\/paused, or another user holds it.\n            if ( 'processing' !== $status || $processing_user !== $current_user ) {\n                $order->update_status( 'cancelled', __( 'Your price lock has expired. Order cancelled.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'Your price lock has expired. Please add the item to your cart again.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n        }\n    }\n\n    public static function add_order_item_meta( $item, $cart_item_key, $values, $order ): void {\n        if ( ! isset( $values['kloktion_frozen_price'] ) ) {\n            return;\n        }\n\n        $start_price = (float) get_post_meta( $values['kloktion_product_id'], '_kloktion_start_price', true );\n        $frozen      = (float) $values['kloktion_frozen_price'];\n        $savings     = $start_price - $frozen;\n        $pct         = $start_price > 0 ? round( ( $savings \/ $start_price ) * 100, 1 ) : 0;\n\n        $item->add_meta_data( '_kloktion_frozen_price', $frozen );\n        $item->add_meta_data( '_kloktion_start_price', $start_price );\n        $item->add_meta_data( '_kloktion_savings', $savings );\n        $item->add_meta_data( '_kloktion_savings_percent', $pct );\n        $item->add_meta_data( '_kloktion_product_id', (int) $values['kloktion_product_id'] );\n    }\n\n    public static function handle_payment_complete( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        \/\/ already processed\n        if ( $order->get_meta( '_kloktion_sale_finalized' ) ) {\n            return;\n        }\n\n        \/\/ FIX A2: Block late async payments (SEPA \/ 3DS retry) for orders released by admin.\n        \/\/ An admin may release a stuck pending_purchase, cancel the order, and restart the\n        \/\/ auction. A delayed payment webhook for the OLD cancelled order must not re-sell the lot.\n        \/\/ If the payment actually settled, auto-refund the customer.\n        if ( '1' === (string) $order->get_meta( '_kloktion_released_by_admin' ) ) {\n            $reason = (string) $order->get_meta( '_kloktion_release_reason' );\n            \/\/ Determine product_id for logging (best-effort from first auction item).\n            $product_id = 0;\n            foreach ( $order->get_items() as $_item ) {\n                $_pid = (int) $_item->get_meta( '_kloktion_product_id' );\n                if ( $_pid ) {\n                    $product_id = $_pid;\n                    break;\n                }\n            }\n            \/\/ Refund the customer if the payment actually settled.\n            if ( $order->is_paid() && function_exists( 'wc_create_refund' ) ) {\n                $refund = wc_create_refund( [\n                    'amount'         => $order->get_total(),\n                    'reason'         => sprintf(\n                        \/* translators: %s: release reason key *\/\n                        __( 'Auction released by admin (%s) before payment settled.', 'kloktion-dutch-auction' ),\n                        $reason\n                    ),\n                    'order_id'       => $order->get_id(),\n                    'refund_payment' => true,\n                    'restock_items'  => false,\n                ] );\n                if ( is_wp_error( $refund ) ) {\n                    $order->update_status( 'failed', sprintf(\n                        \/* translators: %s: error message *\/\n                        __( 'Released-order auto-refund failed: %s. Manual refund required.', 'kloktion-dutch-auction' ),\n                        $refund->get_error_message()\n                    ) );\n                    if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                        \\Kloktion\\Logger::log( $product_id, 'released_order_refund_failed', null, $order->get_user_id(), [\n                            'order_id' => $order->get_id(),\n                            'error'    => $refund->get_error_message(),\n                        ] );\n                    }\n                } else {\n                    if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                        \\Kloktion\\Logger::log( $product_id, 'released_order_refunded', (float) $order->get_total(), $order->get_user_id(), [\n                            'order_id'  => $order->get_id(),\n                            'refund_id' => $refund->get_id(),\n                            'reason'    => $reason,\n                        ] );\n                    }\n                }\n            } else {\n                if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'released_order_payment_rejected', null, $order->get_user_id(), [\n                        'order_id' => $order->get_id(),\n                        'reason'   => $reason,\n                    ] );\n                }\n            }\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            if ( ! in_array( $status, [ 'processing', 'pending_purchase', 'active', 'paused' ], true ) ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" is no longer available (status: %s). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id ),\n                        $status\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', null, $order->get_customer_id(), [\n                    'order_id'       => $order_id,\n                    'auction_status' => $status,\n                ] );\n                return;\n            }\n\n            if ( 'processing' === $status ) {\n                $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                $buyer_id        = $order->get_customer_id();\n                if ( $processing_user && $processing_user !== $buyer_id ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'Another buyer holds the lock for this auction. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $buyer_id      = (int) $order->get_customer_id();\n\n                if ( ( $pending_user && $pending_user !== $buyer_id ) || ( $pending_order && $pending_order !== $order_id ) ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'This auction is reserved for another pending purchase. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            $frozen = (float) $item->get_meta( '_kloktion_frozen_price' );\n            $start  = (float) $item->get_meta( '_kloktion_start_price' );\n            $pct    = (float) $item->get_meta( '_kloktion_savings_percent' );\n\n            $buyer_id = $order->get_customer_id();\n            $sold = Auction_Engine::sell_auction( $product_id, $buyer_id, $frozen );\n\n            if ( ! $sold ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" could not be finalized (already sold or ended). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', $frozen, $buyer_id, [\n                    'order_id' => $order_id,\n                    'reason'   => 'sell_auction_failed',\n                ] );\n                return;\n            }\n\n            $order->add_order_note(\n                sprintf(\n                    __( 'Dutch Auction purchase: %s at %s (started at %s, savings %s%%)', 'kloktion-dutch-auction' ),\n                    get_the_title( $product_id ),\n                    wc_price( $frozen ),\n                    wc_price( $start ),\n                    $pct\n                )\n            );\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n            delete_post_meta( $product_id, '_kloktion_pending_user' );\n            delete_post_meta( $product_id, '_kloktion_pending_order' );\n            delete_post_meta( $product_id, '_kloktion_pending_price' );\n            delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n        }\n\n        $order->update_meta_data( '_kloktion_sale_finalized', time() );\n        $order->save();\n    }\n\n    public static function handle_payment_failed( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === (int) $order->get_customer_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function show_order_pay_notice(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            if ( $item->get_meta( '_kloktion_product_id' ) ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( $has_auction ) {\n            printf(\n                '<div class=\"woocommerce-info kloktion-pay-notice\">%s<\/div>',\n                esc_html__( 'This lot is reserved for you. Please complete payment within 96 hours to avoid a penalty.', 'kloktion-dutch-auction' )\n            );\n        }\n    }\n\n    public static function show_payment_method( $order ): void {\n        if ( ! $order instanceof \\WC_Order ) {\n            return;\n        }\n\n        \/\/ Only show for orders containing auction products.\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            $product = $item->get_product();\n            if ( $product instanceof Product_Type ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( ! $has_auction ) {\n            return;\n        }\n\n        $method = $order->get_payment_method_title();\n        if ( $method ) {\n            printf(\n                '<p class=\"kloktion-payment-method\"><strong>%s<\/strong> %s<\/p>',\n                esc_html__( 'Payment method:', 'kloktion-dutch-auction' ),\n                esc_html( $method )\n            );\n        }\n    }\n\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:13","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Dokan {\n\n    public static function init(): void {\n        if ( ! class_exists( 'WeDevs_Dokan' ) ) {\n            return;\n        }\n\n        add_action( 'dokan_new_product_after_product_tags', [ __CLASS__, 'vendor_product_fields' ] );\n        add_action( 'dokan_product_edit_after_product_tags', [ __CLASS__, 'vendor_product_fields' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'dokan_product_updated',   [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'wp_head',                  [ __CLASS__, 'inject_vendor_dashboard_styles' ] );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'save_post_product', [ __CLASS__, 'force_auction_product_type' ], 999, 1 );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_dashboard_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'load_dashboard_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_payouts_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_payouts_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'render_payouts_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_exit_dashboard_nav' ], 99 );\n\n        \/\/ Dokan blocks vendor's own products; allow dutch_auction\n        add_filter( 'woocommerce_is_purchasable', [ __CLASS__, 'allow_dutch_auction_purchase' ], 20, 2 );\n\n        \/\/ Dokan Lite hardcodes product_type='simple' in Products listing; include dutch_auction.\n        add_filter( 'dokan_product_types', [ __CLASS__, 'register_product_type' ] );\n        add_filter( 'dokan_product_listing_arg', [ __CLASS__, 'include_auctions_in_product_listing' ] );\n        add_action( 'init', [ __CLASS__, 'ensure_current_seller_enabled' ], 20 );\n    }\n\n    public static function vendor_product_fields( $post_id = null, $product = null ): void {\n        $product_id = 0;\n        if ( $product instanceof \\WC_Product ) {\n            $product_id = $product->get_id();\n        } elseif ( is_numeric( $post_id ) ) {\n            $product_id = (int) $post_id;\n        }\n\n        $start_price   = $product_id ? get_post_meta( $product_id, '_kloktion_start_price', true ) : '';\n        $reserve_price = $product_id ? get_post_meta( $product_id, '_kloktion_reserve_price', true ) : '';\n        $duration      = $product_id ? get_post_meta( $product_id, '_kloktion_duration', true ) : '';\n        $status        = $product_id ? Auction_Engine::get_status( $product_id ) : '';\n        $terms         = $product_id ? wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] ) : [];\n        $is_auction    = ! $product_id || in_array( 'dutch_auction', $terms, true );\n\n        \/\/ Lock auction fields once the auction has started (any non-empty, non-draft status).\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        $is_locked       = $product_id && in_array( $status, $locked_statuses, true );\n\n        \/\/ Render pending_review notice before the template.\n        if ( 'pending_review' === $status ) {\n            echo '<div style=\"background:#fff8e1;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#7a5800;\">'\n                . '&#9203; ' . esc_html__( 'Your update is pending admin approval. You\\'ll be notified by email once reviewed.', 'kloktion-dutch-auction' )\n                . '<\/div>';\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/product-fields.php';\n    }\n\n    \/**\n     * Intercept vendor product updates for moderation before save_vendor_product runs.\n     * Runs at priority 5, before save_vendor_product at priority 10.\n     *\n     * If moderation is enabled and the auction is in 'stopped' or 'pending_review' state,\n     * capture submitted data, queue it for review, set status to pending_review, and\n     * unhook save_vendor_product so it cannot overwrite the fields.\n     *\/\n    public static function intercept_vendor_update_for_moderation( $product_id, $data ): void {\n        global $wpdb;\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] intercept_vendor_update_for_moderation: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( empty( $settings['moderation_enabled'] ) ) {\n            return;\n        }\n\n        $current_status = get_post_meta( $product_id, '_kloktion_status', true );\n\n        \/\/ Allow new products (empty _kloktion_status) only if this is a Dutch Auction.\n        \/\/ For existing products, only intercept when in 'stopped' or 'pending_review' state.\n        $is_new_product = ( '' === $current_status || false === $current_status );\n        if ( $is_new_product ) {\n            \/\/ Detect if this is a Dutch Auction submission before deciding to intercept.\n            $is_auction_signal = ! empty( $_POST['_kloktion_is_auction'] )\n                || ! empty( $data['_kloktion_is_auction'] )\n                || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n                || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n                || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n            if ( ! $is_auction_signal ) {\n                return; \/\/ Non-auction new product \u2014 skip.\n            }\n        } elseif ( ! in_array( $current_status, [ 'stopped', 'pending_review' ], true ) ) {\n            return; \/\/ Existing product not in a moderation-eligible state.\n        }\n\n        \/\/ Capture only our plugin fields from $data.\n        $kloktion_data = [];\n        foreach ( (array) $data as $key => $value ) {\n            if ( 0 === strpos( $key, '_kloktion_' ) ) {\n                $kloktion_data[ $key ] = $value;\n            }\n        }\n\n        \/\/ Upsert: if a pending row already exists for this product, reset it rather than duplicating.\n        $wpdb->query( $wpdb->prepare(\n            \"INSERT INTO {$wpdb->prefix}kloktion_moderation_queue\n             (product_id, vendor_id, submitted_data, submitted_at, status)\n             VALUES (%d, %d, %s, %s, 'pending')\n             ON DUPLICATE KEY UPDATE\n                vendor_id        = VALUES(vendor_id),\n                submitted_data   = VALUES(submitted_data),\n                submitted_at     = VALUES(submitted_at),\n                status           = 'pending',\n                reviewed_by      = NULL,\n                reviewed_at      = NULL,\n                rejection_reason = NULL\",\n            (int) $product_id,\n            (int) get_current_user_id(),\n            wp_json_encode( $kloktion_data ),\n            current_time( 'mysql' )\n        ) );\n\n        do_action( 'kloktion_moderation_submitted', $product_id, $data );\n\n        \/\/ CRITICAL: Persist auction meta + term BEFORE unhooking save_vendor_product.\n        \/\/ Otherwise Dokan's own save resets product_type to 'simple' and auction data is lost.\n        \/\/ Robust detection: accept checkbox, price field, or product_type signal.\n        $intercept_is_auction = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] )\n            || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n            || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n            || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n        if ( $intercept_is_auction ) {\n            \/\/ Force dutch_auction product type term.\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n            \/\/ Persist auction meta from $data (or $_POST fallback).\n            $meta_map = [\n                '_kloktion_is_auction',\n                '_kloktion_start_price',\n                '_kloktion_reserve_price',\n                '_kloktion_duration',\n                '_kloktion_start_date',\n                '_kloktion_start_time',\n                '_kloktion_start_timestamp',\n                '_kloktion_decay_curve',\n            ];\n            foreach ( $meta_map as $key ) {\n                $value = null;\n                if ( isset( $data[ $key ] ) ) {\n                    $value = $data[ $key ];\n                } elseif ( isset( $_POST[ $key ] ) ) {\n                    $value = wp_unslash( $_POST[ $key ] );\n                }\n                if ( $value !== null && $value !== '' ) {\n                    if ( in_array( $key, [ '_kloktion_start_price', '_kloktion_reserve_price' ], true ) ) {\n                        update_post_meta( $product_id, $key, (float) $value );\n                    } elseif ( in_array( $key, [ '_kloktion_duration', '_kloktion_start_timestamp' ], true ) ) {\n                        update_post_meta( $product_id, $key, absint( $value ) );\n                    } else {\n                        update_post_meta( $product_id, $key, sanitize_text_field( $value ) );\n                    }\n                }\n            }\n\n            \/\/ Ensure _kloktion_is_auction flag persists (used by force_auction_product_type detection).\n            update_post_meta( $product_id, '_kloktion_is_auction', '1' );\n\n            \/\/ Compute end_time if we have start_time + duration.\n            $start_ts = (int) get_post_meta( $product_id, '_kloktion_start_timestamp', true );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $start_ts > 0 && $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_ts + $duration );\n            }\n        }\n\n        \/\/ Mark as pending_review AFTER meta is saved.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Unhook save_vendor_product so it doesn't overwrite the pending_review state.\n        remove_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10 );\n        remove_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10 );\n    }\n\n    public static function save_vendor_product( $product_id, $data ): void {\n        $user_id = get_current_user_id();\n        if ( $user_id && get_transient( 'kloktion_validation_fail_' . $user_id ) ) {\n            delete_transient( 'kloktion_validation_fail_' . $user_id );\n            return;\n        }\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] save_vendor_product: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        \/\/ Robust auction detection: accept any of these signals\n        \/\/ (Dokan may strip or rename fields; presence of price\/type fields is enough).\n        $is_auction_posted = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] );\n\n        $has_auction_price = isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price']\n            || isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'];\n\n        \/\/ Check product_type field in POST (Dokan sends this as 'product_type' or inside $data)\n        $posted_type = $_POST['product_type'] ?? ( $data['product_type'] ?? '' );\n        $type_is_auction = ( 'dutch_auction' === $posted_type );\n\n        \/\/ Also accept if the existing term is already dutch_auction (locked auction re-save)\n        $existing_terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        $has_auction_term = ! is_wp_error( $existing_terms ) && in_array( 'dutch_auction', (array) $existing_terms, true );\n\n        $is_auction = $is_auction_posted || $has_auction_price || $type_is_auction || $has_auction_term;\n\n        if ( ! $is_auction ) {\n            return;\n        }\n\n        wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n        \/\/ If the auction has already started, vendors cannot change core auction fields.\n        $current_status  = get_post_meta( $product_id, '_kloktion_status', true );\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        if ( in_array( $current_status, $locked_statuses, true ) ) {\n            return; \/\/ Auction fields are locked; title\/description\/images handled by Dokan core.\n        }\n\n        $raw_start     = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : ( isset( $data['_kloktion_start_price'] ) ? $data['_kloktion_start_price'] : '' );\n        $start_price   = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_start ) : floatval( $raw_start ) );\n        $no_reserve    = ! empty( $_POST['_kloktion_no_reserve'] ) || ! empty( $data['_kloktion_no_reserve'] );\n        $raw_reserve   = $no_reserve ? '' : ( isset( $_POST['_kloktion_reserve_price'] ) ? wp_unslash( $_POST['_kloktion_reserve_price'] ) : ( isset( $data['_kloktion_reserve_price'] ) ? $data['_kloktion_reserve_price'] : '' ) );\n        $reserve_price = $no_reserve ? 0 : (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_reserve ) : floatval( $raw_reserve ) );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : ( isset( $data['_kloktion_duration'] ) ? absint( $data['_kloktion_duration'] ) : 86400 );\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n\n        update_post_meta( $product_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $product_id, '_kloktion_duration', $duration );\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        if ( ! $status ) {\n            $now = time();\n            update_post_meta( $product_id, '_kloktion_status', 'active' );\n            update_post_meta( $product_id, '_kloktion_start_time', $now );\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n            Logger::log( $product_id, 'active', $start_price, get_current_user_id() );\n        }\n    }\n\n    \/**\n     * Dokan sometimes has seller-role users without the selling flag after manual\n     * account creation\/import. Enable only missing values; explicit \"no\" stays no.\n     *\/\n    public static function ensure_current_seller_enabled(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        $roles = (array) $user->roles;\n        if ( ! $user || ( ! in_array( 'seller', $roles, true ) && ! in_array( 'administrator', $roles, true ) ) ) {\n            return;\n        }\n\n        $selling = get_user_meta( $user_id, 'dokan_enable_selling', true );\n        if ( '' === $selling ) {\n            update_user_meta( $user_id, 'dokan_enable_selling', 'yes' );\n        }\n    }\n\n    public static function add_dashboard_menu( $urls ): array {\n        $urls['kloktion-auctions'] = [\n            'title' => __( 'My Auctions', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-gavel\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-auctions' ),\n            'pos'   => 55,\n        ];\n\n        return $urls;\n    }\n\n    public static function register_query_var( $query_vars ): array {\n        $query_vars[] = 'kloktion-auctions';\n        return $query_vars;\n    }\n\n    public static function load_dashboard_template( $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-auctions'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/my-auctions.php';\n    }\n\n    \/**\n     * Register dutch_auction in Dokan's product type dropdown.\n     *\/\n    public static function register_product_type( array $types ): array {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    \/**\n     * Dokan Lite restricts Products listing to product_type='simple'.\n     * Modify the tax_query to also include 'dutch_auction'.\n     *\/\n    public static function include_auctions_in_product_listing( array $args ): array {\n        if ( empty( $args['tax_query'] ) || ! is_array( $args['tax_query'] ) ) {\n            return $args;\n        }\n\n        foreach ( $args['tax_query'] as &$clause ) {\n            if (\n                is_array( $clause )\n                && isset( $clause['taxonomy'], $clause['field'], $clause['terms'], $clause['operator'] )\n                && 'product_type' === $clause['taxonomy']\n                && 'slug' === $clause['field']\n                && 'IN' === $clause['operator']\n                && is_array( $clause['terms'] )\n                && in_array( 'simple', $clause['terms'], true )\n                && ! in_array( 'dutch_auction', $clause['terms'], true )\n            ) {\n                $clause['terms'][] = 'dutch_auction';\n            }\n        }\n        unset( $clause );\n\n        return $args;\n    }\n\n    public static function allow_dutch_auction_purchase( bool $purchasable, $product ): bool {\n        if ( ! $product instanceof Product_Type ) {\n            return $purchasable;\n        }\n        \/\/ If Dokan already marked it non-purchasable for own-product reason,\n        \/\/ re-check: guests should always be able to purchase, and\n        \/\/ non-author logged-in users should too.\n        if ( ! $purchasable && $product->get_status() === 'publish' ) {\n            $current_user = get_current_user_id();\n            if ( 0 === $current_user ) {\n                return true; \/\/ Guests can always see Add to Cart.\n            }\n            $author = absint( get_post_field( 'post_author', $product->get_id() ) );\n            if ( $author !== $current_user ) {\n                return true;\n            }\n        }\n        return $purchasable;\n    }\n\n    \/**\n     * Add \"Payouts\" menu item to Dokan vendor dashboard navigation.\n     *\/\n    public static function add_payouts_menu( array $urls ): array {\n        $urls['kloktion-payouts'] = [\n            'title' => __( 'Payouts', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-credit-card\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-payouts' ),\n            'pos'   => 60,\n        ];\n\n        return $urls;\n    }\n\n    \/**\n     * Register kloktion-payouts as a Dokan query var.\n     *\/\n    public static function register_payouts_query_var( array $query_vars ): array {\n        $query_vars[] = 'kloktion-payouts';\n        return $query_vars;\n    }\n\n    \/**\n     * Render the Payouts \/ Stripe Connect template in the vendor dashboard.\n     *\n     * Integration note for class-stripe-connect.php:\n     *   ajax_start_onboarding() must compute URLs as:\n     *     $return_url  = dokan_get_navigation_url('kloktion-payouts') . '?stripe_return=1';\n     *     $refresh_url = dokan_get_navigation_url('kloktion-payouts');\n     *   This ensures the vendor lands back on this page after Stripe onboarding.\n     *\/\n    public static function render_payouts_template( array $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-payouts'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        $account_id  = get_user_meta( $vendor_id, '_stripe_connect_account_id', true );\n        $status      = get_user_meta( $vendor_id, '_stripe_connect_status', true );\n        $onboarded_at = get_user_meta( $vendor_id, '_stripe_connect_onboarded_at', true );\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/payouts.php';\n    }\n\n    \/**\n     * Force dutch_auction product type after any save that might reset it to 'simple'.\n     * Runs late (priority 9999\/999) so Dokan's internal save cannot override.\n     * Detects auction products via existing term, POST flag, or auction meta (covers locked auctions too).\n     *\/\n    public static function force_auction_product_type( int $product_id ): void {\n        if ( $product_id <= 0 ) {\n            return;\n        }\n        \/\/ Avoid running during initial WP import\/cron saves\n        if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {\n            return;\n        }\n        \/\/ Skip revisions\n        if ( wp_is_post_revision( $product_id ) ) {\n            return;\n        }\n\n        $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        if ( is_wp_error( $terms ) ) {\n            return;\n        }\n\n        $has_auction_term = in_array( 'dutch_auction', (array) $terms, true );\n        $posted_auction   = ! empty( $_POST['_kloktion_is_auction'] );\n        $has_auction_meta = (bool) get_post_meta( $product_id, '_kloktion_start_price', true )\n                         || '1' === get_post_meta( $product_id, '_kloktion_is_auction', true );\n\n        $is_auction = $has_auction_term || $posted_auction || $has_auction_meta;\n\n        if ( $is_auction ) {\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n            clean_post_cache( $product_id );\n        }\n    }\n\n    \/**\n     * R12: Block vendor save when Dutch Auction start price is missing.\n     * Sets a transient flag so save_vendor_product() can early-return.\n     * On dokan_new_product_added with invalid price, trashes the placeholder post.\n     *\n     * FIX A3: Guard against trashing normal (non-auction) products.\n     * If the vendor saves a regular simple product, _kloktion_start_price is empty\n     * and the old code would wp_trash_post() their legitimate product. The type check\n     * below ensures we only validate auction products.\n     *\/\n    public static function validate_vendor_start_price( $product_id, $data = [] ): void {\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        \/\/ Only validate when this is a Dutch Auction product.\n        $is_auction = false;\n        $product = function_exists( 'wc_get_product' ) ? wc_get_product( $product_id ) : null;\n        if ( $product && method_exists( $product, 'get_type' ) && 'dutch_auction' === $product->get_type() ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && ! empty( $_POST['_kloktion_is_auction'] ) ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $_POST['product_type'] ) && 'dutch_auction' === $_POST['product_type'] ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $data['product_type'] ) && 'dutch_auction' === $data['product_type'] ) {\n            $is_auction = true;\n        }\n        \/\/ Marker meta from product_type registration \u2014 fallback.\n        if ( ! $is_auction ) {\n            $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n            if ( is_array( $terms ) && in_array( 'dutch_auction', $terms, true ) ) {\n                $is_auction = true;\n            }\n        }\n        if ( ! $is_auction ) {\n            return; \/\/ Not an auction product \u2014 never validate or trash.\n        }\n\n        $raw   = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : '';\n        $price = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw ) : floatval( $raw ) );\n        if ( $price <= 0 ) {\n            if ( function_exists( 'wc_add_notice' ) ) {\n                wc_add_notice( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ), 'error' );\n            }\n            set_transient( 'kloktion_validation_fail_' . get_current_user_id(), 1, 60 );\n            \/\/ Trash the placeholder post only on new-product action (no prior status means it was just created).\n            if ( current_action() === 'dokan_new_product_added' && ! get_post_meta( $product_id, '_kloktion_status', true ) ) {\n                $trashed = wp_trash_post( $product_id );\n                if ( ! $trashed && class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'vendor_invalid_product_trash_failed', null, get_current_user_id(), [\n                        'reason' => 'empty_start_price',\n                    ] );\n                }\n            }\n        }\n    }\n\n    \/**\n     * R12: Hide WC Regular\/Sale price + entire Inventory section from Dokan vendor product form.\n     * Dutch Auction lots are unique \u2014 inventory is irrelevant; price is derived from _kloktion_start_price.\n     *\/\n    public static function inject_vendor_dashboard_styles(): void {\n        if ( ! function_exists( 'dokan_is_seller_dashboard' ) || ! dokan_is_seller_dashboard() ) {\n            return;\n        }\n        echo '<style id=\"kloktion-dokan-hide-fields\">\n.dokan-dashboard ._regular_price_field,\n.dokan-dashboard ._sale_price_field,\n.dokan-dashboard .dokan-product-regular-price,\n.dokan-dashboard .dokan-product-less-price,\n.dokan-dashboard .dokan-price-container,\n.dokan-dashboard .dokan-product-inventory,\n.dokan-dashboard .dokan-inventory-container,\n.dokan-dashboard ._manage_stock_field,\n.dokan-dashboard ._stock_field,\n.dokan-dashboard ._stock_status_field,\n.dokan-dashboard ._backorders_field,\n.dokan-dashboard ._sold_individually_field,\n.dokan-dashboard .show_if_simple._sku_field,\n.dokan-dashboard .dokan-form-group.dokan-clearfix.show_if_simple,\n.dokan-dashboard .dokan-product-shipping-container,\n.dokan-dashboard #dokan-product-inventory,\n.dokan-dashboard .dokan-edit-row.content-half-part.dokan-clearfix.dokan-product-inventory { display: none !important; }\n<\/style>';\n    }\n\n    \/**\n     * Add \"Browse Shop\" link to the Dokan vendor sidebar so vendors can exit the dashboard.\n     *\/\n    public static function add_exit_dashboard_nav( array $nav ): array {\n        $nav['kloktion-exit'] = [\n            'title'      => __( 'Browse Shop', 'kloktion-dutch-auction' ),\n            'icon'       => '<i class=\"fas fa-store\"><\/i>',\n            'url'        => site_url( '\/shop\/' ),\n            'pos'        => 200,\n            'permission' => 'dokan_view_overview_menu',\n        ];\n        return $nav;\n    }\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:13","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Dokan {\n\n    public static function init(): void {\n        if ( ! class_exists( 'WeDevs_Dokan' ) ) {\n            return;\n        }\n\n        add_action( 'dokan_new_product_after_product_tags', [ __CLASS__, 'vendor_product_fields' ] );\n        add_action( 'dokan_product_edit_after_product_tags', [ __CLASS__, 'vendor_product_fields' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'dokan_product_updated',   [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'wp_head',                  [ __CLASS__, 'inject_vendor_dashboard_styles' ] );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'save_post_product', [ __CLASS__, 'force_auction_product_type' ], 999, 1 );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_dashboard_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'load_dashboard_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_payouts_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_payouts_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'render_payouts_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_exit_dashboard_nav' ], 99 );\n\n        \/\/ Dokan blocks vendor's own products; allow dutch_auction\n        add_filter( 'woocommerce_is_purchasable', [ __CLASS__, 'allow_dutch_auction_purchase' ], 20, 2 );\n\n        \/\/ Dokan Lite hardcodes product_type='simple' in Products listing; include dutch_auction.\n        add_filter( 'dokan_product_types', [ __CLASS__, 'register_product_type' ] );\n        add_filter( 'dokan_product_listing_arg', [ __CLASS__, 'include_auctions_in_product_listing' ] );\n        add_action( 'init', [ __CLASS__, 'ensure_current_seller_enabled' ], 20 );\n    }\n\n    public static function vendor_product_fields( $post_id = null, $product = null ): void {\n        $product_id = 0;\n        if ( $product instanceof \\WC_Product ) {\n            $product_id = $product->get_id();\n        } elseif ( is_numeric( $post_id ) ) {\n            $product_id = (int) $post_id;\n        }\n\n        $start_price   = $product_id ? get_post_meta( $product_id, '_kloktion_start_price', true ) : '';\n        $reserve_price = $product_id ? get_post_meta( $product_id, '_kloktion_reserve_price', true ) : '';\n        $duration      = $product_id ? get_post_meta( $product_id, '_kloktion_duration', true ) : '';\n        $status        = $product_id ? Auction_Engine::get_status( $product_id ) : '';\n        $terms         = $product_id ? wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] ) : [];\n        $is_auction    = ! $product_id || in_array( 'dutch_auction', $terms, true );\n\n        \/\/ Lock auction fields once the auction has started (any non-empty, non-draft status).\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        $is_locked       = $product_id && in_array( $status, $locked_statuses, true );\n\n        \/\/ Render pending_review notice before the template.\n        if ( 'pending_review' === $status ) {\n            echo '<div style=\"background:#fff8e1;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#7a5800;\">'\n                . '&#9203; ' . esc_html__( 'Your update is pending admin approval. You\\'ll be notified by email once reviewed.', 'kloktion-dutch-auction' )\n                . '<\/div>';\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/product-fields.php';\n    }\n\n    \/**\n     * Intercept vendor product updates for moderation before save_vendor_product runs.\n     * Runs at priority 5, before save_vendor_product at priority 10.\n     *\n     * If moderation is enabled and the auction is in 'stopped' or 'pending_review' state,\n     * capture submitted data, queue it for review, set status to pending_review, and\n     * unhook save_vendor_product so it cannot overwrite the fields.\n     *\/\n    public static function intercept_vendor_update_for_moderation( $product_id, $data ): void {\n        global $wpdb;\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] intercept_vendor_update_for_moderation: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( empty( $settings['moderation_enabled'] ) ) {\n            return;\n        }\n\n        $current_status = get_post_meta( $product_id, '_kloktion_status', true );\n\n        \/\/ Allow new products (empty _kloktion_status) only if this is a Dutch Auction.\n        \/\/ For existing products, only intercept when in 'stopped' or 'pending_review' state.\n        $is_new_product = ( '' === $current_status || false === $current_status );\n        if ( $is_new_product ) {\n            \/\/ Detect if this is a Dutch Auction submission before deciding to intercept.\n            $is_auction_signal = ! empty( $_POST['_kloktion_is_auction'] )\n                || ! empty( $data['_kloktion_is_auction'] )\n                || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n                || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n                || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n            if ( ! $is_auction_signal ) {\n                return; \/\/ Non-auction new product \u2014 skip.\n            }\n        } elseif ( ! in_array( $current_status, [ 'stopped', 'pending_review' ], true ) ) {\n            return; \/\/ Existing product not in a moderation-eligible state.\n        }\n\n        \/\/ Capture only our plugin fields from $data.\n        $kloktion_data = [];\n        foreach ( (array) $data as $key => $value ) {\n            if ( 0 === strpos( $key, '_kloktion_' ) ) {\n                $kloktion_data[ $key ] = $value;\n            }\n        }\n\n        \/\/ Upsert: if a pending row already exists for this product, reset it rather than duplicating.\n        $wpdb->query( $wpdb->prepare(\n            \"INSERT INTO {$wpdb->prefix}kloktion_moderation_queue\n             (product_id, vendor_id, submitted_data, submitted_at, status)\n             VALUES (%d, %d, %s, %s, 'pending')\n             ON DUPLICATE KEY UPDATE\n                vendor_id        = VALUES(vendor_id),\n                submitted_data   = VALUES(submitted_data),\n                submitted_at     = VALUES(submitted_at),\n                status           = 'pending',\n                reviewed_by      = NULL,\n                reviewed_at      = NULL,\n                rejection_reason = NULL\",\n            (int) $product_id,\n            (int) get_current_user_id(),\n            wp_json_encode( $kloktion_data ),\n            current_time( 'mysql' )\n        ) );\n\n        do_action( 'kloktion_moderation_submitted', $product_id, $data );\n\n        \/\/ CRITICAL: Persist auction meta + term BEFORE unhooking save_vendor_product.\n        \/\/ Otherwise Dokan's own save resets product_type to 'simple' and auction data is lost.\n        \/\/ Robust detection: accept checkbox, price field, or product_type signal.\n        $intercept_is_auction = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] )\n            || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n            || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n            || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n        if ( $intercept_is_auction ) {\n            \/\/ Force dutch_auction product type term.\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n            \/\/ Persist auction meta from $data (or $_POST fallback).\n            $meta_map = [\n                '_kloktion_is_auction',\n                '_kloktion_start_price',\n                '_kloktion_reserve_price',\n                '_kloktion_duration',\n                '_kloktion_start_date',\n                '_kloktion_start_time',\n                '_kloktion_start_timestamp',\n                '_kloktion_decay_curve',\n            ];\n            foreach ( $meta_map as $key ) {\n                $value = null;\n                if ( isset( $data[ $key ] ) ) {\n                    $value = $data[ $key ];\n                } elseif ( isset( $_POST[ $key ] ) ) {\n                    $value = wp_unslash( $_POST[ $key ] );\n                }\n                if ( $value !== null && $value !== '' ) {\n                    if ( in_array( $key, [ '_kloktion_start_price', '_kloktion_reserve_price' ], true ) ) {\n                        update_post_meta( $product_id, $key, (float) $value );\n                    } elseif ( in_array( $key, [ '_kloktion_duration', '_kloktion_start_timestamp' ], true ) ) {\n                        update_post_meta( $product_id, $key, absint( $value ) );\n                    } else {\n                        update_post_meta( $product_id, $key, sanitize_text_field( $value ) );\n                    }\n                }\n            }\n\n            \/\/ Ensure _kloktion_is_auction flag persists (used by force_auction_product_type detection).\n            update_post_meta( $product_id, '_kloktion_is_auction', '1' );\n\n            \/\/ Compute end_time if we have start_time + duration.\n            $start_ts = (int) get_post_meta( $product_id, '_kloktion_start_timestamp', true );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $start_ts > 0 && $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_ts + $duration );\n            }\n        }\n\n        \/\/ Mark as pending_review AFTER meta is saved.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Unhook save_vendor_product so it doesn't overwrite the pending_review state.\n        remove_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10 );\n        remove_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10 );\n    }\n\n    public static function save_vendor_product( $product_id, $data ): void {\n        $user_id = get_current_user_id();\n        if ( $user_id && get_transient( 'kloktion_validation_fail_' . $user_id ) ) {\n            delete_transient( 'kloktion_validation_fail_' . $user_id );\n            return;\n        }\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] save_vendor_product: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        \/\/ Robust auction detection: accept any of these signals\n        \/\/ (Dokan may strip or rename fields; presence of price\/type fields is enough).\n        $is_auction_posted = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] );\n\n        $has_auction_price = isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price']\n            || isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'];\n\n        \/\/ Check product_type field in POST (Dokan sends this as 'product_type' or inside $data)\n        $posted_type = $_POST['product_type'] ?? ( $data['product_type'] ?? '' );\n        $type_is_auction = ( 'dutch_auction' === $posted_type );\n\n        \/\/ Also accept if the existing term is already dutch_auction (locked auction re-save)\n        $existing_terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        $has_auction_term = ! is_wp_error( $existing_terms ) && in_array( 'dutch_auction', (array) $existing_terms, true );\n\n        $is_auction = $is_auction_posted || $has_auction_price || $type_is_auction || $has_auction_term;\n\n        if ( ! $is_auction ) {\n            return;\n        }\n\n        wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n        \/\/ If the auction has already started, vendors cannot change core auction fields.\n        $current_status  = get_post_meta( $product_id, '_kloktion_status', true );\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        if ( in_array( $current_status, $locked_statuses, true ) ) {\n            return; \/\/ Auction fields are locked; title\/description\/images handled by Dokan core.\n        }\n\n        $raw_start     = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : ( isset( $data['_kloktion_start_price'] ) ? $data['_kloktion_start_price'] : '' );\n        $start_price   = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_start ) : floatval( $raw_start ) );\n        $no_reserve    = ! empty( $_POST['_kloktion_no_reserve'] ) || ! empty( $data['_kloktion_no_reserve'] );\n        $raw_reserve   = $no_reserve ? '' : ( isset( $_POST['_kloktion_reserve_price'] ) ? wp_unslash( $_POST['_kloktion_reserve_price'] ) : ( isset( $data['_kloktion_reserve_price'] ) ? $data['_kloktion_reserve_price'] : '' ) );\n        $reserve_price = $no_reserve ? 0 : (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_reserve ) : floatval( $raw_reserve ) );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : ( isset( $data['_kloktion_duration'] ) ? absint( $data['_kloktion_duration'] ) : 86400 );\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n\n        update_post_meta( $product_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $product_id, '_kloktion_duration', $duration );\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        if ( ! $status ) {\n            $now = time();\n            update_post_meta( $product_id, '_kloktion_status', 'active' );\n            update_post_meta( $product_id, '_kloktion_start_time', $now );\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n            Logger::log( $product_id, 'active', $start_price, get_current_user_id() );\n        }\n    }\n\n    \/**\n     * Dokan sometimes has seller-role users without the selling flag after manual\n     * account creation\/import. Enable only missing values; explicit \"no\" stays no.\n     *\/\n    public static function ensure_current_seller_enabled(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        $roles = (array) $user->roles;\n        if ( ! $user || ( ! in_array( 'seller', $roles, true ) && ! in_array( 'administrator', $roles, true ) ) ) {\n            return;\n        }\n\n        $selling = get_user_meta( $user_id, 'dokan_enable_selling', true );\n        if ( '' === $selling ) {\n            update_user_meta( $user_id, 'dokan_enable_selling', 'yes' );\n        }\n    }\n\n    public static function add_dashboard_menu( $urls ): array {\n        $urls['kloktion-auctions'] = [\n            'title' => __( 'My Auctions', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-gavel\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-auctions' ),\n            'pos'   => 55,\n        ];\n\n        return $urls;\n    }\n\n    public static function register_query_var( $query_vars ): array {\n        $query_vars[] = 'kloktion-auctions';\n        return $query_vars;\n    }\n\n    public static function load_dashboard_template( $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-auctions'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/my-auctions.php';\n    }\n\n    \/**\n     * Register dutch_auction in Dokan's product type dropdown.\n     *\/\n    public static function register_product_type( array $types ): array {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    \/**\n     * Dokan Lite restricts Products listing to product_type='simple'.\n     * Modify the tax_query to also include 'dutch_auction'.\n     *\/\n    public static function include_auctions_in_product_listing( array $args ): array {\n        if ( empty( $args['tax_query'] ) || ! is_array( $args['tax_query'] ) ) {\n            return $args;\n        }\n\n        foreach ( $args['tax_query'] as &$clause ) {\n            if (\n                is_array( $clause )\n                && isset( $clause['taxonomy'], $clause['field'], $clause['terms'], $clause['operator'] )\n                && 'product_type' === $clause['taxonomy']\n                && 'slug' === $clause['field']\n                && 'IN' === $clause['operator']\n                && is_array( $clause['terms'] )\n                && in_array( 'simple', $clause['terms'], true )\n                && ! in_array( 'dutch_auction', $clause['terms'], true )\n            ) {\n                $clause['terms'][] = 'dutch_auction';\n            }\n        }\n        unset( $clause );\n\n        return $args;\n    }\n\n    public static function allow_dutch_auction_purchase( bool $purchasable, $product ): bool {\n        if ( ! $product instanceof Product_Type ) {\n            return $purchasable;\n        }\n        \/\/ If Dokan already marked it non-purchasable for own-product reason,\n        \/\/ re-check: guests should always be able to purchase, and\n        \/\/ non-author logged-in users should too.\n        if ( ! $purchasable && $product->get_status() === 'publish' ) {\n            $current_user = get_current_user_id();\n            if ( 0 === $current_user ) {\n                return true; \/\/ Guests can always see Add to Cart.\n            }\n            $author = absint( get_post_field( 'post_author', $product->get_id() ) );\n            if ( $author !== $current_user ) {\n                return true;\n            }\n        }\n        return $purchasable;\n    }\n\n    \/**\n     * Add \"Payouts\" menu item to Dokan vendor dashboard navigation.\n     *\/\n    public static function add_payouts_menu( array $urls ): array {\n        $urls['kloktion-payouts'] = [\n            'title' => __( 'Payouts', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-credit-card\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-payouts' ),\n            'pos'   => 60,\n        ];\n\n        return $urls;\n    }\n\n    \/**\n     * Register kloktion-payouts as a Dokan query var.\n     *\/\n    public static function register_payouts_query_var( array $query_vars ): array {\n        $query_vars[] = 'kloktion-payouts';\n        return $query_vars;\n    }\n\n    \/**\n     * Render the Payouts \/ Stripe Connect template in the vendor dashboard.\n     *\n     * Integration note for class-stripe-connect.php:\n     *   ajax_start_onboarding() must compute URLs as:\n     *     $return_url  = dokan_get_navigation_url('kloktion-payouts') . '?stripe_return=1';\n     *     $refresh_url = dokan_get_navigation_url('kloktion-payouts');\n     *   This ensures the vendor lands back on this page after Stripe onboarding.\n     *\/\n    public static function render_payouts_template( array $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-payouts'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        $account_id  = get_user_meta( $vendor_id, '_stripe_connect_account_id', true );\n        $status      = get_user_meta( $vendor_id, '_stripe_connect_status', true );\n        $onboarded_at = get_user_meta( $vendor_id, '_stripe_connect_onboarded_at', true );\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/payouts.php';\n    }\n\n    \/**\n     * Force dutch_auction product type after any save that might reset it to 'simple'.\n     * Runs late (priority 9999\/999) so Dokan's internal save cannot override.\n     * Detects auction products via existing term, POST flag, or auction meta (covers locked auctions too).\n     *\/\n    public static function force_auction_product_type( int $product_id ): void {\n        if ( $product_id <= 0 ) {\n            return;\n        }\n        \/\/ Avoid running during initial WP import\/cron saves\n        if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {\n            return;\n        }\n        \/\/ Skip revisions\n        if ( wp_is_post_revision( $product_id ) ) {\n            return;\n        }\n\n        $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        if ( is_wp_error( $terms ) ) {\n            return;\n        }\n\n        $has_auction_term = in_array( 'dutch_auction', (array) $terms, true );\n        $posted_auction   = ! empty( $_POST['_kloktion_is_auction'] );\n        $has_auction_meta = (bool) get_post_meta( $product_id, '_kloktion_start_price', true )\n                         || '1' === get_post_meta( $product_id, '_kloktion_is_auction', true );\n\n        $is_auction = $has_auction_term || $posted_auction || $has_auction_meta;\n\n        if ( $is_auction ) {\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n            clean_post_cache( $product_id );\n        }\n    }\n\n    \/**\n     * R12: Block vendor save when Dutch Auction start price is missing.\n     * Sets a transient flag so save_vendor_product() can early-return.\n     * On dokan_new_product_added with invalid price, trashes the placeholder post.\n     *\n     * FIX A3: Guard against trashing normal (non-auction) products.\n     * If the vendor saves a regular simple product, _kloktion_start_price is empty\n     * and the old code would wp_trash_post() their legitimate product. The type check\n     * below ensures we only validate auction products.\n     *\/\n    public static function validate_vendor_start_price( $product_id, $data = [] ): void {\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        \/\/ Only validate when this is a Dutch Auction product.\n        $is_auction = false;\n        $product = function_exists( 'wc_get_product' ) ? wc_get_product( $product_id ) : null;\n        if ( $product && method_exists( $product, 'get_type' ) && 'dutch_auction' === $product->get_type() ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && ! empty( $_POST['_kloktion_is_auction'] ) ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $_POST['product_type'] ) && 'dutch_auction' === $_POST['product_type'] ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $data['product_type'] ) && 'dutch_auction' === $data['product_type'] ) {\n            $is_auction = true;\n        }\n        \/\/ Marker meta from product_type registration \u2014 fallback.\n        if ( ! $is_auction ) {\n            $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n            if ( is_array( $terms ) && in_array( 'dutch_auction', $terms, true ) ) {\n                $is_auction = true;\n            }\n        }\n        if ( ! $is_auction ) {\n            return; \/\/ Not an auction product \u2014 never validate or trash.\n        }\n\n        $raw   = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : '';\n        $price = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw ) : floatval( $raw ) );\n        if ( $price <= 0 ) {\n            if ( function_exists( 'wc_add_notice' ) ) {\n                wc_add_notice( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ), 'error' );\n            }\n            set_transient( 'kloktion_validation_fail_' . get_current_user_id(), 1, 60 );\n            \/\/ Trash the placeholder post only on new-product action (no prior status means it was just created).\n            if ( current_action() === 'dokan_new_product_added' && ! get_post_meta( $product_id, '_kloktion_status', true ) ) {\n                $trashed = wp_trash_post( $product_id );\n                if ( ! $trashed && class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'vendor_invalid_product_trash_failed', null, get_current_user_id(), [\n                        'reason' => 'empty_start_price',\n                    ] );\n                }\n            }\n        }\n    }\n\n    \/**\n     * R12: Hide WC Regular\/Sale price + entire Inventory section from Dokan vendor product form.\n     * Dutch Auction lots are unique \u2014 inventory is irrelevant; price is derived from _kloktion_start_price.\n     *\/\n    public static function inject_vendor_dashboard_styles(): void {\n        if ( ! function_exists( 'dokan_is_seller_dashboard' ) || ! dokan_is_seller_dashboard() ) {\n            return;\n        }\n        echo '<style id=\"kloktion-dokan-hide-fields\">\n.dokan-dashboard ._regular_price_field,\n.dokan-dashboard ._sale_price_field,\n.dokan-dashboard .dokan-product-regular-price,\n.dokan-dashboard .dokan-product-less-price,\n.dokan-dashboard .dokan-price-container,\n.dokan-dashboard .dokan-product-inventory,\n.dokan-dashboard .dokan-inventory-container,\n.dokan-dashboard ._manage_stock_field,\n.dokan-dashboard ._stock_field,\n.dokan-dashboard ._stock_status_field,\n.dokan-dashboard ._backorders_field,\n.dokan-dashboard ._sold_individually_field,\n.dokan-dashboard .show_if_simple._sku_field,\n.dokan-dashboard .dokan-form-group.dokan-clearfix.show_if_simple,\n.dokan-dashboard .dokan-product-shipping-container,\n.dokan-dashboard #dokan-product-inventory,\n.dokan-dashboard .dokan-edit-row.content-half-part.dokan-clearfix.dokan-product-inventory { display: none !important; }\n<\/style>';\n    }\n\n    \/**\n     * Add \"Browse Shop\" link to the Dokan vendor sidebar so vendors can exit the dashboard.\n     *\/\n    public static function add_exit_dashboard_nav( array $nav ): array {\n        $nav['kloktion-exit'] = [\n            'title'      => __( 'Browse Shop', 'kloktion-dutch-auction' ),\n            'icon'       => '<i class=\"fas fa-store\"><\/i>',\n            'url'        => site_url( '\/shop\/' ),\n            'pos'        => 200,\n            'permission' => 'dokan_view_overview_menu',\n        ];\n        return $nav;\n    }\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:14","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-installer.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Installer {\n\n    const DB_VERSION = 4;\n\n    public static function activate() {\n        self::create_tables();\n        self::set_default_options();\n        self::schedule_cron();\n        \/\/ R12: Turnstile secret placeholder \u2014 admin sets via swissknife after deploy.\n        if ( false === get_option( 'kloktion_turnstile_secret', false ) ) {\n            add_option( 'kloktion_turnstile_secret', '' );\n        }\n        update_option( 'kloktion_db_version', self::DB_VERSION );\n        flush_rewrite_rules();\n    }\n\n    public static function maybe_upgrade(): void {\n        $current = (int) get_option( 'kloktion_db_version', 1 );\n        if ( $current < self::DB_VERSION ) {\n            self::create_tables();\n            update_option( 'kloktion_db_version', self::DB_VERSION );\n        }\n    }\n\n    public static function deactivate() {\n        wp_clear_scheduled_hook( 'kloktion_check_auctions' );\n        wp_clear_scheduled_hook( 'kloktion_check_penalties' );\n        wp_clear_scheduled_hook( 'kloktion_auto_release_escrow' );\n    }\n\n    private static function create_tables() {\n        global $wpdb;\n\n        $charset = $wpdb->get_charset_collate();\n\n        $sql_log = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_auction_log (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            product_id bigint(20) unsigned NOT NULL,\n            event varchar(50) NOT NULL,\n            price_at_event decimal(10,2) DEFAULT NULL,\n            user_id bigint(20) unsigned DEFAULT NULL,\n            details text DEFAULT NULL,\n            created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            KEY product_event (product_id, event),\n            KEY user_id (user_id),\n            KEY created_at (created_at)\n        ) $charset;\";\n\n        $sql_watchlist = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_watchlist (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            user_id bigint(20) unsigned NOT NULL,\n            product_id bigint(20) unsigned NOT NULL,\n            price_alert decimal(10,2) DEFAULT NULL,\n            notified tinyint(1) NOT NULL DEFAULT 0,\n            created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            UNIQUE KEY user_product (user_id, product_id),\n            KEY product_id (product_id)\n        ) $charset;\";\n\n        $sql_consents = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_card_consents (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            user_id bigint(20) unsigned NOT NULL,\n            consent_type varchar(50) NOT NULL,\n            ip_address varchar(45) NOT NULL,\n            accepted_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            KEY user_id (user_id),\n            KEY consent_type (consent_type)\n        ) $charset;\";\n\n        $prefix = $wpdb->prefix;\n        $charset_collate = $charset;\n\n        $sql_moderation_queue = \"CREATE TABLE {$prefix}kloktion_moderation_queue (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          product_id bigint(20) unsigned NOT NULL,\n          vendor_id bigint(20) unsigned NOT NULL,\n          submitted_data longtext NOT NULL,\n          submitted_at datetime NOT NULL,\n          status varchar(20) NOT NULL DEFAULT 'pending',\n          reviewed_by bigint(20) unsigned DEFAULT NULL,\n          reviewed_at datetime DEFAULT NULL,\n          rejection_reason text DEFAULT NULL,\n          PRIMARY KEY (id),\n          UNIQUE KEY product_unique (product_id),\n          KEY vendor_id (vendor_id),\n          KEY status (status)\n        ) {$charset_collate};\";\n\n        $sql_moderation_log = \"CREATE TABLE {$prefix}kloktion_moderation_log (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          queue_id bigint(20) unsigned DEFAULT NULL,\n          product_id bigint(20) unsigned NOT NULL,\n          action varchar(30) NOT NULL,\n          admin_id bigint(20) unsigned NOT NULL,\n          notes text DEFAULT NULL,\n          created_at datetime NOT NULL,\n          PRIMARY KEY (id),\n          KEY product_id (product_id),\n          KEY created_at (created_at)\n        ) {$charset_collate};\";\n\n        $sql_escrow = \"CREATE TABLE {$prefix}kloktion_escrow (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          order_id bigint(20) unsigned NOT NULL,\n          product_id bigint(20) unsigned NOT NULL,\n          vendor_id bigint(20) unsigned NOT NULL,\n          payment_intent_id varchar(100) DEFAULT NULL,\n          charge_id varchar(100) DEFAULT NULL,\n          stripe_account_id varchar(100) NOT NULL,\n          amount decimal(10,2) NOT NULL,\n          platform_fee decimal(10,2) NOT NULL DEFAULT 0,\n          currency varchar(10) NOT NULL DEFAULT 'EUR',\n          status varchar(30) NOT NULL DEFAULT 'pending',\n          transfer_id varchar(100) DEFAULT NULL,\n          release_deadline datetime DEFAULT NULL,\n          delivery_confirmed_at datetime DEFAULT NULL,\n          released_at datetime DEFAULT NULL,\n          created_at datetime NOT NULL,\n          updated_at datetime NOT NULL,\n          PRIMARY KEY (id),\n          UNIQUE KEY order_id (order_id),\n          KEY product_id (product_id),\n          KEY vendor_id (vendor_id),\n          KEY status (status),\n          KEY release_deadline (release_deadline),\n          KEY payment_intent_id (payment_intent_id),\n          KEY charge_id (charge_id)\n        ) {$charset_collate};\";\n\n        $sql_disputes = \"CREATE TABLE {$prefix}kloktion_disputes (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          escrow_id bigint(20) unsigned NOT NULL,\n          order_id bigint(20) unsigned NOT NULL,\n          user_id bigint(20) unsigned NOT NULL,\n          reason text NOT NULL,\n          status varchar(30) NOT NULL DEFAULT 'open',\n          admin_id bigint(20) unsigned DEFAULT NULL,\n          admin_notes text DEFAULT NULL,\n          created_at datetime NOT NULL,\n          resolved_at datetime DEFAULT NULL,\n          PRIMARY KEY (id),\n          KEY escrow_id (escrow_id),\n          KEY order_id (order_id),\n          KEY status (status)\n        ) {$charset_collate};\";\n\n        require_once ABSPATH . 'wp-admin\/includes\/upgrade.php';\n        dbDelta( $sql_log );\n        dbDelta( $sql_watchlist );\n        dbDelta( $sql_consents );\n        dbDelta( $sql_moderation_queue );\n        dbDelta( $sql_moderation_log );\n        dbDelta( $sql_escrow );\n        dbDelta( $sql_disputes );\n    }\n\n    private static function set_default_options() {\n        $defaults = [\n            'default_duration'       => 86400,  \/\/ 24 hours\n            'pause_duration'         => 180,    \/\/ 3 minutes\n            'freeze_timeout'         => 600,    \/\/ 10 minutes\n            'rate_limit'             => 60,     \/\/ requests per minute\n            'poll_interval'          => 2,      \/\/ seconds\n            'processing_timeout'     => 300,    \/\/ 5 minutes\n            'penalty_check_interval' => 86400,  \/\/ daily\n            'commission_percent'     => 10,\n            'dispute_window_days'    => 7,\n            'auto_release_days'      => 10,\n            'escrow_enabled'         => 0,\n            'stripe_platform_secret' => '',\n            'stripe_webhook_secret'  => '',\n            'moderation_enabled'     => 1,\n        ];\n\n        \/\/ Merge: existing values take precedence; new keys from $defaults are added.\n        $existing = get_option( 'kloktion_settings', [] );\n        $merged   = array_merge( $defaults, is_array( $existing ) ? $existing : [] );\n        update_option( 'kloktion_settings', $merged );\n    }\n\n    \/**\n     * Run schema + options migrations when DB_VERSION advances.\n     * Called on plugins_loaded (priority 5) so it runs before the rest of the plugin boots.\n     *\/\n    public static function maybe_migrate(): void {\n        $current_db_version = (int) get_option( 'kloktion_db_version', 0 );\n        if ( $current_db_version >= self::DB_VERSION ) {\n            return;\n        }\n\n        \/\/ activate() is idempotent: dbDelta only adds missing columns\/tables\/keys.\n        self::activate();\n    }\n\n    private static function schedule_cron() {\n        \/\/ Register custom schedule during activation (before Plugin class loads).\n        add_filter( 'cron_schedules', function ( $schedules ) {\n            $schedules['every_minute'] = [\n                'interval' => 60,\n                'display'  => 'Every Minute',\n            ];\n            return $schedules;\n        } );\n\n        if ( ! wp_next_scheduled( 'kloktion_check_auctions' ) ) {\n            wp_schedule_event( time(), 'every_minute', 'kloktion_check_auctions' );\n        }\n\n        if ( ! wp_next_scheduled( 'kloktion_check_penalties' ) ) {\n            wp_schedule_event( time(), 'daily', 'kloktion_check_penalties' );\n        }\n\n        if ( ! wp_next_scheduled( 'kloktion_auto_release_escrow' ) ) {\n            wp_schedule_event( time() + 3600, 'daily', 'kloktion_auto_release_escrow' );\n        }\n    }\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:14","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-installer.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Installer {\n\n    const DB_VERSION = 4;\n\n    public static function activate() {\n        self::create_tables();\n        self::set_default_options();\n        self::schedule_cron();\n        \/\/ R12: Turnstile secret placeholder \u2014 admin sets via swissknife after deploy.\n        if ( false === get_option( 'kloktion_turnstile_secret', false ) ) {\n            add_option( 'kloktion_turnstile_secret', '' );\n        }\n        update_option( 'kloktion_db_version', self::DB_VERSION );\n        flush_rewrite_rules();\n    }\n\n    public static function maybe_upgrade(): void {\n        $current = (int) get_option( 'kloktion_db_version', 1 );\n        if ( $current < self::DB_VERSION ) {\n            self::create_tables();\n            update_option( 'kloktion_db_version', self::DB_VERSION );\n        }\n    }\n\n    public static function deactivate() {\n        wp_clear_scheduled_hook( 'kloktion_check_auctions' );\n        wp_clear_scheduled_hook( 'kloktion_check_penalties' );\n        wp_clear_scheduled_hook( 'kloktion_auto_release_escrow' );\n    }\n\n    private static function create_tables() {\n        global $wpdb;\n\n        $charset = $wpdb->get_charset_collate();\n\n        $sql_log = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_auction_log (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            product_id bigint(20) unsigned NOT NULL,\n            event varchar(50) NOT NULL,\n            price_at_event decimal(10,2) DEFAULT NULL,\n            user_id bigint(20) unsigned DEFAULT NULL,\n            details text DEFAULT NULL,\n            created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            KEY product_event (product_id, event),\n            KEY user_id (user_id),\n            KEY created_at (created_at)\n        ) $charset;\";\n\n        $sql_watchlist = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_watchlist (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            user_id bigint(20) unsigned NOT NULL,\n            product_id bigint(20) unsigned NOT NULL,\n            price_alert decimal(10,2) DEFAULT NULL,\n            notified tinyint(1) NOT NULL DEFAULT 0,\n            created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            UNIQUE KEY user_product (user_id, product_id),\n            KEY product_id (product_id)\n        ) $charset;\";\n\n        $sql_consents = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_card_consents (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            user_id bigint(20) unsigned NOT NULL,\n            consent_type varchar(50) NOT NULL,\n            ip_address varchar(45) NOT NULL,\n            accepted_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            KEY user_id (user_id),\n            KEY consent_type (consent_type)\n        ) $charset;\";\n\n        $prefix = $wpdb->prefix;\n        $charset_collate = $charset;\n\n        $sql_moderation_queue = \"CREATE TABLE {$prefix}kloktion_moderation_queue (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          product_id bigint(20) unsigned NOT NULL,\n          vendor_id bigint(20) unsigned NOT NULL,\n          submitted_data longtext NOT NULL,\n          submitted_at datetime NOT NULL,\n          status varchar(20) NOT NULL DEFAULT 'pending',\n          reviewed_by bigint(20) unsigned DEFAULT NULL,\n          reviewed_at datetime DEFAULT NULL,\n          rejection_reason text DEFAULT NULL,\n          PRIMARY KEY (id),\n          UNIQUE KEY product_unique (product_id),\n          KEY vendor_id (vendor_id),\n          KEY status (status)\n        ) {$charset_collate};\";\n\n        $sql_moderation_log = \"CREATE TABLE {$prefix}kloktion_moderation_log (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          queue_id bigint(20) unsigned DEFAULT NULL,\n          product_id bigint(20) unsigned NOT NULL,\n          action varchar(30) NOT NULL,\n          admin_id bigint(20) unsigned NOT NULL,\n          notes text DEFAULT NULL,\n          created_at datetime NOT NULL,\n          PRIMARY KEY (id),\n          KEY product_id (product_id),\n          KEY created_at (created_at)\n        ) {$charset_collate};\";\n\n        $sql_escrow = \"CREATE TABLE {$prefix}kloktion_escrow (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          order_id bigint(20) unsigned NOT NULL,\n          product_id bigint(20) unsigned NOT NULL,\n          vendor_id bigint(20) unsigned NOT NULL,\n          payment_intent_id varchar(100) DEFAULT NULL,\n          charge_id varchar(100) DEFAULT NULL,\n          stripe_account_id varchar(100) NOT NULL,\n          amount decimal(10,2) NOT NULL,\n          platform_fee decimal(10,2) NOT NULL DEFAULT 0,\n          currency varchar(10) NOT NULL DEFAULT 'EUR',\n          status varchar(30) NOT NULL DEFAULT 'pending',\n          transfer_id varchar(100) DEFAULT NULL,\n          release_deadline datetime DEFAULT NULL,\n          delivery_confirmed_at datetime DEFAULT NULL,\n          released_at datetime DEFAULT NULL,\n          created_at datetime NOT NULL,\n          updated_at datetime NOT NULL,\n          PRIMARY KEY (id),\n          UNIQUE KEY order_id (order_id),\n          KEY product_id (product_id),\n          KEY vendor_id (vendor_id),\n          KEY status (status),\n          KEY release_deadline (release_deadline),\n          KEY payment_intent_id (payment_intent_id),\n          KEY charge_id (charge_id)\n        ) {$charset_collate};\";\n\n        $sql_disputes = \"CREATE TABLE {$prefix}kloktion_disputes (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          escrow_id bigint(20) unsigned NOT NULL,\n          order_id bigint(20) unsigned NOT NULL,\n          user_id bigint(20) unsigned NOT NULL,\n          reason text NOT NULL,\n          status varchar(30) NOT NULL DEFAULT 'open',\n          admin_id bigint(20) unsigned DEFAULT NULL,\n          admin_notes text DEFAULT NULL,\n          created_at datetime NOT NULL,\n          resolved_at datetime DEFAULT NULL,\n          PRIMARY KEY (id),\n          KEY escrow_id (escrow_id),\n          KEY order_id (order_id),\n          KEY status (status)\n        ) {$charset_collate};\";\n\n        require_once ABSPATH . 'wp-admin\/includes\/upgrade.php';\n        dbDelta( $sql_log );\n        dbDelta( $sql_watchlist );\n        dbDelta( $sql_consents );\n        dbDelta( $sql_moderation_queue );\n        dbDelta( $sql_moderation_log );\n        dbDelta( $sql_escrow );\n        dbDelta( $sql_disputes );\n    }\n\n    private static function set_default_options() {\n        $defaults = [\n            'default_duration'       => 86400,  \/\/ 24 hours\n            'pause_duration'         => 180,    \/\/ 3 minutes\n            'freeze_timeout'         => 600,    \/\/ 10 minutes\n            'rate_limit'             => 60,     \/\/ requests per minute\n            'poll_interval'          => 2,      \/\/ seconds\n            'processing_timeout'     => 300,    \/\/ 5 minutes\n            'penalty_check_interval' => 86400,  \/\/ daily\n            'commission_percent'     => 10,\n            'dispute_window_days'    => 7,\n            'auto_release_days'      => 10,\n            'escrow_enabled'         => 0,\n            'stripe_platform_secret' => '',\n            'stripe_webhook_secret'  => '',\n            'moderation_enabled'     => 1,\n        ];\n\n        \/\/ Merge: existing values take precedence; new keys from $defaults are added.\n        $existing = get_option( 'kloktion_settings', [] );\n        $merged   = array_merge( $defaults, is_array( $existing ) ? $existing : [] );\n        update_option( 'kloktion_settings', $merged );\n    }\n\n    \/**\n     * Run schema + options migrations when DB_VERSION advances.\n     * Called on plugins_loaded (priority 5) so it runs before the rest of the plugin boots.\n     *\/\n    public static function maybe_migrate(): void {\n        $current_db_version = (int) get_option( 'kloktion_db_version', 0 );\n        if ( $current_db_version >= self::DB_VERSION ) {\n            return;\n        }\n\n        \/\/ activate() is idempotent: dbDelta only adds missing columns\/tables\/keys.\n        self::activate();\n    }\n\n    private static function schedule_cron() {\n        \/\/ Register custom schedule during activation (before Plugin class loads).\n        add_filter( 'cron_schedules', function ( $schedules ) {\n            $schedules['every_minute'] = [\n                'interval' => 60,\n                'display'  => 'Every Minute',\n            ];\n            return $schedules;\n        } );\n\n        if ( ! wp_next_scheduled( 'kloktion_check_auctions' ) ) {\n            wp_schedule_event( time(), 'every_minute', 'kloktion_check_auctions' );\n        }\n\n        if ( ! wp_next_scheduled( 'kloktion_check_penalties' ) ) {\n            wp_schedule_event( time(), 'daily', 'kloktion_check_penalties' );\n        }\n\n        if ( ! wp_next_scheduled( 'kloktion_auto_release_escrow' ) ) {\n            wp_schedule_event( time() + 3600, 'daily', 'kloktion_auto_release_escrow' );\n        }\n    }\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:14","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n        add_action( 'wp_enqueue_scripts', [ __CLASS__, 'enqueue_scripts' ] );\n    }\n\n    public static function enqueue_scripts(): void {\n        \\Kloktion\\Turnstile::enqueue_script(); \/\/ R12: bot protection\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        $turnstile_widget = \\Kloktion\\Turnstile::render_widget( 'kloktionTurnstileCallback' ); \/\/ R12: bot protection\n\n        \/\/ FIX J: if Turnstile is enabled, render Buy button disabled until the widget fires its callback.\n        $turnstile_enabled = \\Kloktion\\Turnstile::is_enabled();\n        $buy_extra_attrs   = $turnstile_enabled\n            ? ' disabled aria-busy=\"true\" data-kloktion-await-turnstile=\"1\"'\n            : '';\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        %s\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\"%s hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            $turnstile_widget, \/\/ R12: bot protection widget (already escaped inside render_widget)\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            $buy_extra_attrs, \/\/ FIX J: disabled+aria-busy+data-attr when Turnstile enabled\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        \/\/ R12: Cloudflare Turnstile bot challenge verification.\n        if ( \\Kloktion\\Turnstile::is_enabled() ) {\n            $cf_token = isset( $_POST['cf_turnstile_token'] ) ? sanitize_text_field( wp_unslash( $_POST['cf_turnstile_token'] ) ) : '';\n            if ( empty( $cf_token ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_missing', 'message' => __( 'Bot challenge missing. Please refresh the page.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n            $remote_ip = isset( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) : ( $_SERVER['REMOTE_ADDR'] ?? '' );\n            $check = \\Kloktion\\Turnstile::verify( $cf_token, (string) $remote_ip );\n            if ( empty( $check['success'] ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_failed', 'message' => __( 'Bot challenge failed. Please try again.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:14","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n        add_action( 'wp_enqueue_scripts', [ __CLASS__, 'enqueue_scripts' ] );\n    }\n\n    public static function enqueue_scripts(): void {\n        \\Kloktion\\Turnstile::enqueue_script(); \/\/ R12: bot protection\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        $turnstile_widget = \\Kloktion\\Turnstile::render_widget( 'kloktionTurnstileCallback' ); \/\/ R12: bot protection\n\n        \/\/ FIX J: if Turnstile is enabled, render Buy button disabled until the widget fires its callback.\n        $turnstile_enabled = \\Kloktion\\Turnstile::is_enabled();\n        $buy_extra_attrs   = $turnstile_enabled\n            ? ' disabled aria-busy=\"true\" data-kloktion-await-turnstile=\"1\"'\n            : '';\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        %s\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\"%s hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            $turnstile_widget, \/\/ R12: bot protection widget (already escaped inside render_widget)\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            $buy_extra_attrs, \/\/ FIX J: disabled+aria-busy+data-attr when Turnstile enabled\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        \/\/ R12: Cloudflare Turnstile bot challenge verification.\n        if ( \\Kloktion\\Turnstile::is_enabled() ) {\n            $cf_token = isset( $_POST['cf_turnstile_token'] ) ? sanitize_text_field( wp_unslash( $_POST['cf_turnstile_token'] ) ) : '';\n            if ( empty( $cf_token ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_missing', 'message' => __( 'Bot challenge missing. Please refresh the page.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n            $remote_ip = isset( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) : ( $_SERVER['REMOTE_ADDR'] ?? '' );\n            $check = \\Kloktion\\Turnstile::verify( $cf_token, (string) $remote_ip );\n            if ( empty( $check['success'] ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_failed', 'message' => __( 'Bot challenge failed. Please try again.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:15","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php","<?php\n\/**\n * Cloudflare Turnstile integration \u2014 Buy Now bot protection.\n *\n * Sitekey is public (committed). Secret lives in wp_option `kloktion_turnstile_secret`,\n * set on the live site via swissknife after deploy. If the option is empty,\n * Turnstile verification is skipped (fail-open at the gate, fail-closed once enabled).\n *\n * @package Kloktion\n *\/\n\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Turnstile {\n\n    const SITE_KEY      = '0x4AAAAAADVTH796CcB5MBVX';\n    const SCRIPT_HANDLE = 'cf-turnstile';\n    const VERIFY_URL    = 'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify';\n\n    \/**\n     * Is Turnstile enabled? Requires the secret option to be set on the live site.\n     *\/\n    public static function is_enabled(): bool {\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        return ! empty( $secret ) && ! empty( self::SITE_KEY );\n    }\n\n    \/**\n     * Enqueue the CF challenges API script. Idempotent.\n     *\/\n    public static function enqueue_script(): void {\n        if ( ! self::is_enabled() ) {\n            return;\n        }\n        if ( ! wp_script_is( self::SCRIPT_HANDLE, 'enqueued' ) ) {\n            wp_enqueue_script(\n                self::SCRIPT_HANDLE,\n                'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js',\n                [],\n                null,\n                [ 'in_footer' => true, 'strategy' => 'async' ]\n            );\n        }\n    }\n\n    \/**\n     * Render the Turnstile widget HTML. Output is safe to echo.\n     *\/\n    public static function render_widget( string $callback_name = 'kloktionTurnstileCallback' ): string {\n        if ( ! self::is_enabled() ) {\n            return '';\n        }\n        return sprintf(\n            '<div class=\"cf-turnstile kloktion-turnstile\" data-sitekey=\"%s\" data-callback=\"%s\" data-theme=\"auto\" data-size=\"flexible\"><\/div>',\n            esc_attr( self::SITE_KEY ),\n            esc_attr( $callback_name )\n        );\n    }\n\n    \/**\n     * Verify a Turnstile token server-side.\n     *\n     * @return array{success:bool, error_codes?:array, message?:string}\n     *\/\n    public static function verify( string $token, string $remoteip = '' ): array {\n        if ( ! self::is_enabled() ) {\n            return [ 'success' => true, 'message' => 'turnstile_disabled' ];\n        }\n        if ( empty( $token ) ) {\n            return [ 'success' => false, 'message' => 'missing_token' ];\n        }\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        if ( empty( $secret ) ) {\n            return [ 'success' => true, 'message' => 'no_secret' ];\n        }\n        $body = [\n            'secret'   => $secret,\n            'response' => $token,\n        ];\n        if ( ! empty( $remoteip ) ) {\n            $body['remoteip'] = $remoteip;\n        }\n        $response = wp_remote_post(\n            self::VERIFY_URL,\n            [\n                'timeout'   => 6,\n                'body'      => $body,\n                'sslverify' => true,\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return [ 'success' => false, 'message' => 'request_failed: ' . $response->get_error_message() ];\n        }\n        $code = wp_remote_retrieve_response_code( $response );\n        if ( 200 !== $code ) {\n            return [ 'success' => false, 'message' => 'http_' . $code ];\n        }\n        $data = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! is_array( $data ) ) {\n            return [ 'success' => false, 'message' => 'invalid_response' ];\n        }\n        return [\n            'success'     => ! empty( $data['success'] ),\n            'error_codes' => isset( $data['error-codes'] ) ? (array) $data['error-codes'] : [],\n        ];\n    }\n}\n"],"result":null}
{"timestamp":"2026-05-24 08:19:15","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php","<?php\n\/**\n * Cloudflare Turnstile integration \u2014 Buy Now bot protection.\n *\n * Sitekey is public (committed). Secret lives in wp_option `kloktion_turnstile_secret`,\n * set on the live site via swissknife after deploy. If the option is empty,\n * Turnstile verification is skipped (fail-open at the gate, fail-closed once enabled).\n *\n * @package Kloktion\n *\/\n\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Turnstile {\n\n    const SITE_KEY      = '0x4AAAAAADVTH796CcB5MBVX';\n    const SCRIPT_HANDLE = 'cf-turnstile';\n    const VERIFY_URL    = 'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify';\n\n    \/**\n     * Is Turnstile enabled? Requires the secret option to be set on the live site.\n     *\/\n    public static function is_enabled(): bool {\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        return ! empty( $secret ) && ! empty( self::SITE_KEY );\n    }\n\n    \/**\n     * Enqueue the CF challenges API script. Idempotent.\n     *\/\n    public static function enqueue_script(): void {\n        if ( ! self::is_enabled() ) {\n            return;\n        }\n        if ( ! wp_script_is( self::SCRIPT_HANDLE, 'enqueued' ) ) {\n            wp_enqueue_script(\n                self::SCRIPT_HANDLE,\n                'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js',\n                [],\n                null,\n                [ 'in_footer' => true, 'strategy' => 'async' ]\n            );\n        }\n    }\n\n    \/**\n     * Render the Turnstile widget HTML. Output is safe to echo.\n     *\/\n    public static function render_widget( string $callback_name = 'kloktionTurnstileCallback' ): string {\n        if ( ! self::is_enabled() ) {\n            return '';\n        }\n        return sprintf(\n            '<div class=\"cf-turnstile kloktion-turnstile\" data-sitekey=\"%s\" data-callback=\"%s\" data-theme=\"auto\" data-size=\"flexible\"><\/div>',\n            esc_attr( self::SITE_KEY ),\n            esc_attr( $callback_name )\n        );\n    }\n\n    \/**\n     * Verify a Turnstile token server-side.\n     *\n     * @return array{success:bool, error_codes?:array, message?:string}\n     *\/\n    public static function verify( string $token, string $remoteip = '' ): array {\n        if ( ! self::is_enabled() ) {\n            return [ 'success' => true, 'message' => 'turnstile_disabled' ];\n        }\n        if ( empty( $token ) ) {\n            return [ 'success' => false, 'message' => 'missing_token' ];\n        }\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        if ( empty( $secret ) ) {\n            return [ 'success' => true, 'message' => 'no_secret' ];\n        }\n        $body = [\n            'secret'   => $secret,\n            'response' => $token,\n        ];\n        if ( ! empty( $remoteip ) ) {\n            $body['remoteip'] = $remoteip;\n        }\n        $response = wp_remote_post(\n            self::VERIFY_URL,\n            [\n                'timeout'   => 6,\n                'body'      => $body,\n                'sslverify' => true,\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return [ 'success' => false, 'message' => 'request_failed: ' . $response->get_error_message() ];\n        }\n        $code = wp_remote_retrieve_response_code( $response );\n        if ( 200 !== $code ) {\n            return [ 'success' => false, 'message' => 'http_' . $code ];\n        }\n        $data = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! is_array( $data ) ) {\n            return [ 'success' => false, 'message' => 'invalid_response' ];\n        }\n        return [\n            'success'     => ! empty( $data['success'] ),\n            'error_codes' => isset( $data['error-codes'] ) ? (array) $data['error-codes'] : [],\n        ];\n    }\n}\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:15","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php","<?php defined( 'ABSPATH' ) || exit; ?>\n<div class=\"dokan-form-group kloktion-dokan-fields\">\n    <h3><?php esc_html_e( 'Dutch Auction Settings', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <input type=\"hidden\" name=\"_kloktion_is_auction\" value=\"1\">\n    <p class=\"dokan-text-left\" style=\"margin:0 0 10px;color:#555;\">\n        <?php esc_html_e( 'Dutch Auction mode is enabled by default and cannot be changed.', 'kloktion-dutch-auction' ); ?>\n    <\/p>\n\n    <?php if ( $is_locked ) : ?>\n        <div style=\"background:#fff3cd;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#856404;\">\n            &#128274; <?php esc_html_e( 'Auction parameters are locked after the auction starts. You can still edit photos, title and description.', 'kloktion-dutch-auction' ); ?>\n        <\/div>\n        <style>\n            .kloktion-dokan-auction-fields input[disabled],\n            .kloktion-dokan-auction-fields select[disabled],\n            .kloktion-dokan-auction-fields textarea[disabled] {\n                background: #f0f0f0 !important;\n                color: #999 !important;\n                cursor: not-allowed !important;\n                opacity: 0.7 !important;\n                border-color: #ddd !important;\n            }\n        <\/style>\n    <?php endif; ?>\n\n    <div class=\"kloktion-dokan-auction-fields\">\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_start_price\"><?php esc_html_e( 'Start Price', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_start_price\" id=\"_kloktion_start_price\"\n                   value=\"<?php echo esc_attr( $start_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" required <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <?php $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0; ?>\n        <div class=\"dokan-form-group\">\n            <label>\n                <input type=\"checkbox\" name=\"_kloktion_no_reserve\" value=\"1\" <?php checked( $no_reserve ); ?> id=\"_kloktion_no_reserve_dokan\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <?php esc_html_e( 'No Reserve (price can drop to zero)', 'kloktion-dutch-auction' ); ?>\n            <\/label>\n        <\/div>\n        <div class=\"dokan-form-group kloktion-dokan-reserve-field\" style=\"<?php echo $no_reserve ? 'display:none;' : ''; ?>\">\n            <label for=\"_kloktion_reserve_price\"><?php esc_html_e( 'Reserve Price (minimum)', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_reserve_price\" id=\"_kloktion_reserve_price\"\n                   value=\"<?php echo esc_attr( $no_reserve ? '' : $reserve_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_duration\"><?php esc_html_e( 'Auction Duration', 'kloktion-dutch-auction' ); ?><\/label>\n            <select name=\"_kloktion_duration\" id=\"_kloktion_duration\" class=\"dokan-form-control\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <option value=\"259200\" <?php selected( $duration, 259200 ); ?>><?php esc_html_e( '3 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"432000\" <?php selected( $duration, 432000 ); ?>><?php esc_html_e( '5 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"604800\" <?php selected( $duration, 604800 ); ?>><?php esc_html_e( '7 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"864000\" <?php selected( $duration, 864000 ); ?>><?php esc_html_e( '10 days', 'kloktion-dutch-auction' ); ?><\/option>\n            <\/select>\n        <\/div>\n\n        <?php if ( $status ) : ?>\n        <div class=\"dokan-form-group\">\n            <label><?php esc_html_e( 'Current Status', 'kloktion-dutch-auction' ); ?><\/label>\n            <span class=\"dokan-label\"><?php echo esc_html( strtoupper( $status ) ); ?><\/span>\n        <\/div>\n        <?php endif; ?>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    var nrCb = document.getElementById('_kloktion_no_reserve_dokan');\n    var rField = document.querySelector('.kloktion-dokan-reserve-field');\n    if (nrCb && rField && !nrCb.disabled) {\n        nrCb.addEventListener('change', function() {\n            rField.style.display = this.checked ? 'none' : '';\n            if (this.checked) document.getElementById('_kloktion_reserve_price').value = '';\n        });\n    }\n\n    var typeField = document.querySelector('[name=\"product_type\"]');\n    if (typeField) {\n        typeField.value = 'dutch_auction';\n        typeField.disabled = true;\n\n        var hiddenType = document.createElement('input');\n        hiddenType.type = 'hidden';\n        hiddenType.name = 'product_type';\n        hiddenType.value = 'dutch_auction';\n        typeField.parentNode.appendChild(hiddenType);\n\n        var wrapper = typeField.closest('.dokan-form-group') || typeField.closest('p');\n        if (wrapper) wrapper.style.display = 'none';\n    }\n})();\n<\/script>\n\n<style>.kloktion-field-error { border-color: #dc3545 !important; }<\/style>\n<script>\n(function() {\n    document.addEventListener( 'DOMContentLoaded', function() {\n        var priceField = document.getElementById( '_kloktion_start_price' );\n        if ( ! priceField ) { return; }\n\n        \/\/ B5: clear error only when value becomes valid (not on every keystroke).\n        priceField.addEventListener( 'input', function() {\n            if ( parseFloat( priceField.value ) > 0 ) {\n                priceField.classList.remove( 'kloktion-field-error' );\n                var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                if ( errDiv ) { errDiv.remove(); }\n            }\n        } );\n\n        \/\/ B5: also handle paste \u2014 value isn't yet updated when paste fires, use setTimeout 0.\n        priceField.addEventListener( 'paste', function() {\n            setTimeout( function() {\n                if ( parseFloat( priceField.value ) > 0 ) {\n                    priceField.classList.remove( 'kloktion-field-error' );\n                    var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                    if ( errDiv ) { errDiv.remove(); }\n                }\n            }, 0 );\n        } );\n\n        \/\/ B4: shared intercept function used by both click delegation and form-submit fallback.\n        function intercept( e ) {\n            var value = parseFloat( priceField.value );\n            if ( ! value || value <= 0 ) {\n                e.preventDefault();\n                e.stopPropagation();\n                e.stopImmediatePropagation();\n                priceField.classList.add( 'kloktion-field-error' );\n                priceField.focus();\n                if ( ! document.getElementById( 'kloktion-start-price-error' ) ) {\n                    var err = document.createElement( 'div' );\n                    err.id = 'kloktion-start-price-error';\n                    err.style.color = '#dc3545';\n                    err.style.marginTop = '6px';\n                    err.style.fontSize = '13px';\n                    err.textContent = <?php echo wp_json_encode( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ) ); ?>;\n                    priceField.parentNode.appendChild( err );\n                }\n                return false;\n            }\n        }\n\n        \/\/ B4: Dokan intercepts Save via XHR without triggering form.submit().\n        \/\/ Bind to save button click with capture so we run before Dokan's handler.\n        document.addEventListener( 'click', function( e ) {\n            var t = e.target;\n            if ( ! t ) { return; }\n            var el = t.closest ? t.closest( 'button, input[type=submit]' ) : null;\n            if ( ! el ) { return; }\n            var isDokanSave = el.matches(\n                '.dokan-btn-theme, [name=\"dokan_update_product\"], [name=\"add_product\"], #publish, .dokan-edit-product-form button[type=submit]'\n            );\n            if ( isDokanSave ) {\n                intercept( e );\n            }\n        }, true );\n\n        \/\/ B4: also keep form-submit fallback for vanilla HTML5 submits.\n        var form = document.querySelector( 'form.dokan-product-edit-form, form#dokan-add-product-form, form.dokan-new-product-form' );\n        if ( form ) {\n            form.addEventListener( 'submit', intercept, true );\n        }\n    } );\n})();\n<\/script>\n"],"result":null}
{"timestamp":"2026-05-24 08:19:15","ip":"2a01:4f8:110:1444::2","action":"file_write","params":["wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php","<?php defined( 'ABSPATH' ) || exit; ?>\n<div class=\"dokan-form-group kloktion-dokan-fields\">\n    <h3><?php esc_html_e( 'Dutch Auction Settings', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <input type=\"hidden\" name=\"_kloktion_is_auction\" value=\"1\">\n    <p class=\"dokan-text-left\" style=\"margin:0 0 10px;color:#555;\">\n        <?php esc_html_e( 'Dutch Auction mode is enabled by default and cannot be changed.', 'kloktion-dutch-auction' ); ?>\n    <\/p>\n\n    <?php if ( $is_locked ) : ?>\n        <div style=\"background:#fff3cd;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#856404;\">\n            &#128274; <?php esc_html_e( 'Auction parameters are locked after the auction starts. You can still edit photos, title and description.', 'kloktion-dutch-auction' ); ?>\n        <\/div>\n        <style>\n            .kloktion-dokan-auction-fields input[disabled],\n            .kloktion-dokan-auction-fields select[disabled],\n            .kloktion-dokan-auction-fields textarea[disabled] {\n                background: #f0f0f0 !important;\n                color: #999 !important;\n                cursor: not-allowed !important;\n                opacity: 0.7 !important;\n                border-color: #ddd !important;\n            }\n        <\/style>\n    <?php endif; ?>\n\n    <div class=\"kloktion-dokan-auction-fields\">\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_start_price\"><?php esc_html_e( 'Start Price', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_start_price\" id=\"_kloktion_start_price\"\n                   value=\"<?php echo esc_attr( $start_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" required <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <?php $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0; ?>\n        <div class=\"dokan-form-group\">\n            <label>\n                <input type=\"checkbox\" name=\"_kloktion_no_reserve\" value=\"1\" <?php checked( $no_reserve ); ?> id=\"_kloktion_no_reserve_dokan\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <?php esc_html_e( 'No Reserve (price can drop to zero)', 'kloktion-dutch-auction' ); ?>\n            <\/label>\n        <\/div>\n        <div class=\"dokan-form-group kloktion-dokan-reserve-field\" style=\"<?php echo $no_reserve ? 'display:none;' : ''; ?>\">\n            <label for=\"_kloktion_reserve_price\"><?php esc_html_e( 'Reserve Price (minimum)', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_reserve_price\" id=\"_kloktion_reserve_price\"\n                   value=\"<?php echo esc_attr( $no_reserve ? '' : $reserve_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_duration\"><?php esc_html_e( 'Auction Duration', 'kloktion-dutch-auction' ); ?><\/label>\n            <select name=\"_kloktion_duration\" id=\"_kloktion_duration\" class=\"dokan-form-control\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <option value=\"259200\" <?php selected( $duration, 259200 ); ?>><?php esc_html_e( '3 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"432000\" <?php selected( $duration, 432000 ); ?>><?php esc_html_e( '5 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"604800\" <?php selected( $duration, 604800 ); ?>><?php esc_html_e( '7 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"864000\" <?php selected( $duration, 864000 ); ?>><?php esc_html_e( '10 days', 'kloktion-dutch-auction' ); ?><\/option>\n            <\/select>\n        <\/div>\n\n        <?php if ( $status ) : ?>\n        <div class=\"dokan-form-group\">\n            <label><?php esc_html_e( 'Current Status', 'kloktion-dutch-auction' ); ?><\/label>\n            <span class=\"dokan-label\"><?php echo esc_html( strtoupper( $status ) ); ?><\/span>\n        <\/div>\n        <?php endif; ?>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    var nrCb = document.getElementById('_kloktion_no_reserve_dokan');\n    var rField = document.querySelector('.kloktion-dokan-reserve-field');\n    if (nrCb && rField && !nrCb.disabled) {\n        nrCb.addEventListener('change', function() {\n            rField.style.display = this.checked ? 'none' : '';\n            if (this.checked) document.getElementById('_kloktion_reserve_price').value = '';\n        });\n    }\n\n    var typeField = document.querySelector('[name=\"product_type\"]');\n    if (typeField) {\n        typeField.value = 'dutch_auction';\n        typeField.disabled = true;\n\n        var hiddenType = document.createElement('input');\n        hiddenType.type = 'hidden';\n        hiddenType.name = 'product_type';\n        hiddenType.value = 'dutch_auction';\n        typeField.parentNode.appendChild(hiddenType);\n\n        var wrapper = typeField.closest('.dokan-form-group') || typeField.closest('p');\n        if (wrapper) wrapper.style.display = 'none';\n    }\n})();\n<\/script>\n\n<style>.kloktion-field-error { border-color: #dc3545 !important; }<\/style>\n<script>\n(function() {\n    document.addEventListener( 'DOMContentLoaded', function() {\n        var priceField = document.getElementById( '_kloktion_start_price' );\n        if ( ! priceField ) { return; }\n\n        \/\/ B5: clear error only when value becomes valid (not on every keystroke).\n        priceField.addEventListener( 'input', function() {\n            if ( parseFloat( priceField.value ) > 0 ) {\n                priceField.classList.remove( 'kloktion-field-error' );\n                var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                if ( errDiv ) { errDiv.remove(); }\n            }\n        } );\n\n        \/\/ B5: also handle paste \u2014 value isn't yet updated when paste fires, use setTimeout 0.\n        priceField.addEventListener( 'paste', function() {\n            setTimeout( function() {\n                if ( parseFloat( priceField.value ) > 0 ) {\n                    priceField.classList.remove( 'kloktion-field-error' );\n                    var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                    if ( errDiv ) { errDiv.remove(); }\n                }\n            }, 0 );\n        } );\n\n        \/\/ B4: shared intercept function used by both click delegation and form-submit fallback.\n        function intercept( e ) {\n            var value = parseFloat( priceField.value );\n            if ( ! value || value <= 0 ) {\n                e.preventDefault();\n                e.stopPropagation();\n                e.stopImmediatePropagation();\n                priceField.classList.add( 'kloktion-field-error' );\n                priceField.focus();\n                if ( ! document.getElementById( 'kloktion-start-price-error' ) ) {\n                    var err = document.createElement( 'div' );\n                    err.id = 'kloktion-start-price-error';\n                    err.style.color = '#dc3545';\n                    err.style.marginTop = '6px';\n                    err.style.fontSize = '13px';\n                    err.textContent = <?php echo wp_json_encode( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ) ); ?>;\n                    priceField.parentNode.appendChild( err );\n                }\n                return false;\n            }\n        }\n\n        \/\/ B4: Dokan intercepts Save via XHR without triggering form.submit().\n        \/\/ Bind to save button click with capture so we run before Dokan's handler.\n        document.addEventListener( 'click', function( e ) {\n            var t = e.target;\n            if ( ! t ) { return; }\n            var el = t.closest ? t.closest( 'button, input[type=submit]' ) : null;\n            if ( ! el ) { return; }\n            var isDokanSave = el.matches(\n                '.dokan-btn-theme, [name=\"dokan_update_product\"], [name=\"add_product\"], #publish, .dokan-edit-product-form button[type=submit]'\n            );\n            if ( isDokanSave ) {\n                intercept( e );\n            }\n        }, true );\n\n        \/\/ B4: also keep form-submit fallback for vanilla HTML5 submits.\n        var form = document.querySelector( 'form.dokan-product-edit-form, form#dokan-add-product-form, form.dokan-new-product-form' );\n        if ( form ) {\n            form.addEventListener( 'submit', intercept, true );\n        }\n    } );\n})();\n<\/script>\n"],"result":"fatal: WPRC_Legacy::file_write(): Argument #1 ($params) must be of type array, string given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5507"}
{"timestamp":"2026-05-24 08:19:30","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/test-write.txt","content":"hello v3.4.5"},"result":null}
{"timestamp":"2026-05-24 08:19:43","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.5\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.5' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-24 08:19:43","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.5 - 2026-05-24 =\n* UX: Stronger visual separation between the activation slider and Buy Now button - 28px margin + 24px padding + 1px divider line, with higher CSS specificity so theme button rules cannot override the gap.\n* Feature: WP-Admin \"Put back on sale\" control on stuck pending_purchase lots. Cancels the pending order, clears the 96h reservation, restarts the auction from the original start price and duration. Reason dropdown (penalty unpaid \/ seller request \/ admin decision) records intent in the order note and Logger entry.\n* Feature: Dokan vendor product form now blocks save when Dutch Auction Start Price is missing or zero. Visible WooCommerce error notice on the server side plus a JS hint that highlights the field and focuses it on submit.\n* Feature: Dokan vendor product form hides the standard WooCommerce Regular\/Sale price fields and the entire Inventory section. Dutch Auction lots are unique and their price is derived from _kloktion_start_price - the extra fields only confused vendors.\n* Security: Cloudflare Turnstile integration on the one-click buy flow. Widget renders between the slider track and the Buy Now button. Token is verified server-side via siteverify before any pending_purchase is created. Fail-closed once the secret is set; fail-open by default until the operator enables it via wp_option kloktion_turnstile_secret.\n* DX: Added DESIGN.md baseline (Google design.md spec) at the repo root to lock in tokens for future UI changes.\n\n= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-24 08:19:44","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__instruction {\n    display: block;\n    margin-bottom: 8px;\n    font-size: 14px;\n    font-weight: 600;\n    color: #333;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click--active .kloktion-one-click__track {\n    background: rgba(93, 45, 163, 0.12);\n}\n\n.kloktion-one-click--active .kloktion-one-click__label {\n    color: #5d2da3;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n\/* v3.4.5: stronger separation - higher specificity beats theme button rules *\/\nbody .kloktion-one-click .kloktion-one-click__buy,\nbody .kloktion-one-click__track + .kloktion-one-click__buy {\n    display: block !important;\n    width: 100% !important;\n    margin: 28px 0 0 0 !important;\n    padding-top: 24px;\n    border-top: 1px solid rgba(127, 127, 127, 0.25);\n    position: relative;\n}\n\n@media (max-width: 767px) {\n    body .kloktion-one-click .kloktion-one-click__buy,\n    body .kloktion-one-click__track + .kloktion-one-click__buy {\n        margin-top: 16px !important;\n        padding-top: 12px;\n    }\n}\n\nbody .kloktion-one-click .kloktion-one-click__buy[hidden],\n.kloktion-one-click__buy[hidden] {\n    display: none !important;\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:45","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    \/\/ R12: Cloudflare Turnstile token storage. Populated by the data-callback on widget success.\n    window.kloktionTurnstileToken = '';\n\n    \/\/ Detect Turnstile by DOM widget presence, not window.turnstile global (which may be missing when CF JS is blocked\/slow).\n    function isTurnstileExpected() {\n        return !! document.querySelector( '.cf-turnstile.kloktion-turnstile' );\n    }\n\n    window.kloktionTurnstileCallback = function( token ) {\n        window.kloktionTurnstileToken = token || '';\n        \/\/ FIX G: re-enable Buy buttons that were held pending token capture \u2014 with 500ms grace period\n        \/\/ so a finger still on the button after turnstile.reset() cannot fire a double-submit.\n        setTimeout( function() {\n            document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn) {\n                btn.removeAttribute('data-kloktion-await-turnstile');\n                if ( btn.dataset.kloktionPendingActive === '1' ) {\n                    btn.disabled = false;\n                    btn.setAttribute('aria-busy', 'false');\n                    if ( btn.dataset.kloktionOrigText ) {\n                        btn.textContent = btn.dataset.kloktionOrigText;\n                        delete btn.dataset.kloktionOrigText;\n                    }\n                }\n            });\n        }, 500 );\n    };\n\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n\n            \/\/ FIX G (v2): guard by DOM widget presence so blocked\/slow CF JS still hard-disables Buy.\n            if (active && buyBtn) {\n                if ( isTurnstileExpected() && ! window.kloktionTurnstileToken ) {\n                    buyBtn.disabled = true;\n                    buyBtn.setAttribute('aria-busy', 'true');\n                    buyBtn.dataset.kloktionPendingActive = '1';\n                    buyBtn.dataset.kloktionAwaitTurnstile = '1';\n                    buyBtn.dataset.kloktionOrigText = buyBtn.textContent;\n                    buyBtn.textContent = 'Verifying...';\n                } else {\n                    buyBtn.disabled = false;\n                    buyBtn.dataset.kloktionPendingActive = '0';\n                }\n            } else if (!active && buyBtn) {\n                \/\/ FIX G: deactivating \u2014 clear the await flags and restore text.\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n                buyBtn.removeAttribute('aria-busy');\n                if ( buyBtn.dataset.kloktionOrigText ) {\n                    buyBtn.textContent = buyBtn.dataset.kloktionOrigText;\n                    delete buyBtn.dataset.kloktionOrigText;\n                }\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            \/\/ B3: reset Turnstile and hold all visible Buy buttons in pending state until callback fires.\n            function resetTurnstileAndPause() {\n                if ( typeof window.turnstile !== 'undefined' && typeof window.turnstile.reset === 'function' ) {\n                    try { window.turnstile.reset(); } catch(e) {}\n                }\n                window.kloktionTurnstileToken = '';\n                if ( ! isTurnstileExpected() ) { return; }\n                \/\/ Put every visible Buy button back to pending state - callback will re-enable.\n                document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn){\n                    if ( btn.hidden ) { return; }\n                    btn.disabled = true;\n                    btn.setAttribute('aria-busy', 'true');\n                    btn.dataset.kloktionPendingActive = '1';\n                    btn.dataset.kloktionAwaitTurnstile = '1';\n                    if ( ! btn.dataset.kloktionOrigText ) {\n                        btn.dataset.kloktionOrigText = btn.textContent;\n                    }\n                    btn.textContent = 'Verifying...';\n                });\n            }\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n                fd.append('cf_turnstile_token', window.kloktionTurnstileToken || ''); \/\/ R12\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            \/\/ B3: token is single-use \u2014 reset Turnstile and hold button until new token arrives.\n                            resetTurnstileAndPause();\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        \/\/ B3: network failure \u2014 reset Turnstile and hold button until new token arrives.\n                        resetTurnstileAndPause();\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        \/\/ Expose fireBuy on the container element so the delegated click handler can reach it.\n        if ( root ) { root._kloktionFireBuy = fireBuy; }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        \/\/ Direct Buy binding removed \u2014 handled by delegated listener below so dynamically\n        \/\/ injected Buy buttons (AJAX cart updates, variation reloads) also work.\n    });\n\n    \/\/ FIX 4: Delegated click handler for .kloktion-one-click__buy.\n    \/\/ Covers buttons present at init AND any injected later (AJAX \/ variation reloads).\n    document.addEventListener('click', function(e) {\n        var btn = e.target && e.target.closest ? e.target.closest('.kloktion-one-click__buy') : null;\n        if ( ! btn ) { return; }\n        if ( btn.hidden || btn.disabled ) { return; }\n        e.preventDefault();\n        \/\/ Walk up to find the matching slider container and call its fireBuy.\n        \/\/ Each slider instance stores fireBuy on the container via data attr for delegation.\n        var container = btn.closest('.kloktion-one-click');\n        if ( container && typeof container._kloktionFireBuy === 'function' ) {\n            container._kloktionFireBuy();\n        }\n    }, false);\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n    \/\/ FIX 3: 12-second Turnstile timeout \u2014 if widget is in DOM but no token arrives, show inline error.\n    if ( isTurnstileExpected() ) {\n        setTimeout( function() {\n            if ( ! window.kloktionTurnstileToken ) {\n                document.querySelectorAll('.kloktion-one-click__buy').forEach( function(btn) {\n                    if ( btn.dataset.kloktionAwaitTurnstile === '1' ) {\n                        btn.textContent = 'Verification timed out. Reload page.';\n                        btn.setAttribute('aria-busy', 'false');\n                    }\n                } );\n            }\n        }, 12000 );\n    }\n\n})();\n"},"result":null}
{"timestamp":"2026-05-24 08:19:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Admin {\n\n    public static function init_product_hooks(): void {\n        add_filter( 'woocommerce_product_data_tabs', [ __CLASS__, 'product_data_tab' ] );\n        add_action( 'woocommerce_product_data_panels', [ __CLASS__, 'product_data_panel' ] );\n        add_action( 'woocommerce_process_product_meta', [ __CLASS__, 'save_product_meta' ] );\n        add_action( 'woocommerce_product_options_general_product_data', [ __CLASS__, 'show_general_tab_for_type' ] );\n        add_action( 'wp_ajax_kloktion_justice_button', [ __CLASS__, 'ajax_justice_button' ] );\n        add_action( 'wp_ajax_kloktion_justice_delete', [ __CLASS__, 'ajax_justice_delete' ] );\n        add_action( 'wp_ajax_kloktion_moderation_approve', [ __CLASS__, 'ajax_moderation_approve' ] );\n        add_action( 'wp_ajax_kloktion_moderation_reject', [ __CLASS__, 'ajax_moderation_reject' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_release', [ __CLASS__, 'ajax_dispute_resolve_release' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_refund', [ __CLASS__, 'ajax_dispute_resolve_refund' ] );\n        add_action( 'wp_ajax_kloktion_release_pending', [ __CLASS__, 'ajax_release_pending' ] );\n\n        add_action( 'add_meta_boxes', [ __CLASS__, 'add_log_metabox' ] );\n    }\n\n    public static function register_menu(): void {\n        add_menu_page(\n            __( 'Kloktion Auctions', 'kloktion-dutch-auction' ),\n            __( 'Kloktion', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ],\n            'dashicons-chart-area',\n            56\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-settings',\n            [ __CLASS__, 'render_settings' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-moderation',\n            [ __CLASS__, 'render_moderation_queue' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-disputes',\n            [ __CLASS__, 'render_disputes_page' ]\n        );\n    }\n\n    public static function product_data_tab( $tabs ) {\n        $tabs['kloktion_auction'] = [\n            'label'    => __( 'Dutch Auction', 'kloktion-dutch-auction' ),\n            'target'   => 'kloktion_auction_data',\n            'class'    => [ 'show_if_dutch_auction' ],\n            'priority' => 11,\n        ];\n        return $tabs;\n    }\n\n    public static function show_general_tab_for_type(): void {\n        \/\/ Add classes so WC shows General tab for dutch_auction type.\n        \/\/ Pricing field toggle is handled in kloktion-admin.js for reliability.\n        echo '<script>jQuery(function($){\n            $(\".product_data_tabs .general_tab\").addClass(\"show_if_dutch_auction\");\n            $(\"#general_product_data\").addClass(\"show_if_dutch_auction\");\n        });<\/script>';\n    }\n\n    public static function product_data_panel(): void {\n        global $post;\n        $product_id = $post->ID;\n\n        $start_price   = get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $duration      = get_post_meta( $product_id, '_kloktion_duration', true );\n        $start_time    = get_post_meta( $product_id, '_kloktion_start_time', true );\n        $status        = Auction_Engine::get_status( $product_id );\n        $start_now     = empty( $start_time );\n\n        echo '<div id=\"kloktion_auction_data\" class=\"panel woocommerce_options_panel hidden\">';\n\n        wp_nonce_field( 'kloktion_product_save', 'kloktion_product_nonce' );\n\n        $status_labels = [\n            'pending_review' => __( 'Awaiting Review', 'kloktion-dutch-auction' ),\n            'scheduled'      => '\ud83d\udfe1 Scheduled',\n            'active'         => '\ud83d\udfe2 Active',\n            'paused'         => '\ud83d\udd34 Last Chance',\n            'processing'     => '\ud83d\udd35 Processing',\n            'sold'           => '\u2705 Sold',\n            'expired'        => '\u26ab Expired',\n            'stopped'        => '\ud83d\uded1 Stopped',\n        ];\n        echo '<div class=\"options_group\">';\n        echo '<p class=\"form-field\"><label>' . esc_html__( 'Status', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<span class=\"kloktion-status-badge\">' . ( $status_labels[ $status ] ?? esc_html( $status ) ) . '<\/span>';\n\n        if ( in_array( $status, [ 'active', 'paused' ], true ) ) {\n            $current_price = Auction_Engine::calculate_price( $product_id );\n            $time_left     = Auction_Engine::get_time_remaining( $product_id );\n            echo ' | ' . esc_html__( 'Current Price:', 'kloktion-dutch-auction' ) . ' <strong>' . wp_kses_post( wc_price( $current_price ) ) . '<\/strong>';\n            echo ' | ' . esc_html__( 'Time Left:', 'kloktion-dutch-auction' ) . ' <strong>' . esc_html( gmdate( 'H:i:s', $time_left ) ) . '<\/strong>';\n        }\n        echo '<\/p><\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_start_price',\n            'label'             => sprintf( __( 'Start Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $start_price,\n            'desc_tip'          => true,\n            'description'       => __( 'The highest price the auction starts at.', 'kloktion-dutch-auction' ),\n        ] );\n\n        $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0;\n\n        woocommerce_wp_checkbox( [\n            'id'          => '_kloktion_no_reserve',\n            'label'       => __( 'No Reserve', 'kloktion-dutch-auction' ),\n            'value'       => $no_reserve ? 'yes' : 'no',\n            'description' => __( 'Allow price to drop to zero. No minimum price.', 'kloktion-dutch-auction' ),\n        ] );\n\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_reserve_price',\n            'label'             => sprintf( __( 'Reserve Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $no_reserve ? '' : $reserve_price,\n            'desc_tip'          => true,\n            'description'       => __( 'Minimum price the auction will drop to. Must be less than start price.', 'kloktion-dutch-auction' ),\n            'wrapper_class'     => $no_reserve ? 'kloktion-reserve-field hidden' : 'kloktion-reserve-field',\n        ] );\n        echo '<\/div>';\n        echo '<script>jQuery(function($){var cb=$(\"#_kloktion_no_reserve\"),f=$(\".kloktion-reserve-field\");cb.on(\"change\",function(){f.toggle(!this.checked);if(this.checked)$(\"#_kloktion_reserve_price\").val(\"\")});});<\/script>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_select( [\n            'id'      => '_kloktion_duration',\n            'label'   => __( 'Listing Duration', 'kloktion-dutch-auction' ),\n            'options' => [\n                ''      => __( 'Select duration...', 'kloktion-dutch-auction' ),\n                '259200'=> __( '3 days', 'kloktion-dutch-auction' ),\n                '432000'=> __( '5 days', 'kloktion-dutch-auction' ),\n                '604800'=> __( '7 days', 'kloktion-dutch-auction' ),\n                '864000'=> __( '10 days', 'kloktion-dutch-auction' ),\n            ],\n            'value'   => $duration,\n        ] );\n        echo '<\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_checkbox( [\n            'id'    => '_kloktion_start_now',\n            'label' => __( 'Start immediately', 'kloktion-dutch-auction' ),\n            'value' => $start_now ? 'yes' : 'no',\n        ] );\n\n        $schedule_date = $start_time ? gmdate( 'Y-m-d', (int) $start_time ) : '';\n        $schedule_time = $start_time ? gmdate( 'H:i', (int) $start_time ) : '';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_date\">' . esc_html__( 'Start Date', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"date\" id=\"_kloktion_schedule_date\" name=\"_kloktion_schedule_date\" value=\"' . esc_attr( $schedule_date ) . '\" style=\"width:auto;\" \/>';\n        echo '<\/p>';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_time\">' . esc_html__( 'Start Time', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"time\" id=\"_kloktion_schedule_time\" name=\"_kloktion_schedule_time\" value=\"' . esc_attr( $schedule_time ) . '\" style=\"width:auto;\" \/>';\n        echo '<span class=\"description\">' . esc_html__( 'UTC time. Leave empty and check \"Start immediately\" to start on save.', 'kloktion-dutch-auction' ) . '<\/span>';\n        echo '<\/p>';\n        echo '<\/div>';\n\n        if ( current_user_can( 'manage_woocommerce' ) && in_array( $status, [ 'active', 'paused', 'scheduled' ], true ) ) {\n            echo '<div class=\"options_group kloktion-justice-section\">';\n            echo '<h4 style=\"padding:0 12px;color:#c62828;\">' . esc_html__( 'Justice Button', 'kloktion-dutch-auction' ) . '<\/h4>';\n            echo '<p class=\"form-field\">';\n            echo '<label for=\"_kloktion_stop_reason\">' . esc_html__( 'Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<textarea id=\"_kloktion_stop_reason\" name=\"_kloktion_stop_reason\" rows=\"2\" placeholder=\"' . esc_attr__( 'Enter reason for stopping\/deleting this auction...', 'kloktion-dutch-auction' ) . '\"><\/textarea>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>' . esc_html__( 'Notify Seller', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<input type=\"checkbox\" id=\"_kloktion_notify_seller\" name=\"_kloktion_notify_seller\" value=\"yes\" checked=\"checked\" \/> ';\n            echo '<span class=\"description\">' . esc_html__( 'Send email notification to the seller with the reason.', 'kloktion-dutch-auction' ) . '<\/span>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>&nbsp;<\/label>';\n            echo '<button type=\"button\" id=\"kloktion-justice-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"stop\">';\n            echo esc_html__( 'Stop This Auction', 'kloktion-dutch-auction' );\n            echo '<\/button> &nbsp;';\n            echo '<button type=\"button\" id=\"kloktion-justice-delete-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"delete\" style=\"background:#c62828;border-color:#c62828;color:#fff;\">';\n            echo esc_html__( 'Delete Permanently', 'kloktion-dutch-auction' );\n            echo '<\/button>';\n            echo '<\/p>';\n            echo '<\/div>';\n        }\n\n        if ( current_user_can( 'manage_woocommerce' ) && 'pending_purchase' === $status ) {\n            $pending_order_id = (int) get_post_meta( $post->ID, '_kloktion_pending_order', true );\n            $deadline         = (int) get_post_meta( $post->ID, '_kloktion_payment_deadline', true );\n            ?>\n            <div class=\"options_group kloktion-pending-purchase-actions\" style=\"margin-top:12px;padding:12px;background:#fff7e6;border:1px solid #ffb84d;border-radius:4px;\">\n                <p style=\"margin:0 0 8px;\"><strong><?php esc_html_e( 'Pending Purchase', 'kloktion-dutch-auction' ); ?><\/strong><\/p>\n                <?php if ( $pending_order_id ) : ?>\n                    <p style=\"margin:0 0 4px;font-size:13px;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: order edit link *\/\n                            esc_html__( 'Order: %s', 'kloktion-dutch-auction' ),\n                            '<a href=\"' . esc_url( get_edit_post_link( $pending_order_id ) ) . '\">#' . esc_html( $pending_order_id ) . '<\/a>'\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <?php if ( $deadline ) : ?>\n                    <p style=\"margin:0 0 8px;font-size:13px;color:#666;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: human-readable deadline *\/\n                            esc_html__( 'Payment deadline: %s', 'kloktion-dutch-auction' ),\n                            esc_html( gmdate( 'Y-m-d H:i', $deadline ) . ' UTC' )\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <p class=\"form-field\">\n                    <label for=\"kloktion-release-reason\" style=\"font-size:13px;\"><?php esc_html_e( 'Reason', 'kloktion-dutch-auction' ); ?>:<\/label>\n                    <select id=\"kloktion-release-reason\" class=\"regular-text\" style=\"width:100%;\">\n                        <option value=\"penalty_unpaid\"><?php esc_html_e( 'Penalty unpaid (invalid card)', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"seller_request\"><?php esc_html_e( 'Seller request', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"admin_decision\"><?php esc_html_e( 'Admin decision', 'kloktion-dutch-auction' ); ?><\/option>\n                    <\/select>\n                <\/p>\n                <p class=\"form-field\">\n                    <label>&nbsp;<\/label>\n                    <button type=\"button\" class=\"button button-primary kloktion-release-pending-btn\"\n                        data-product-id=\"<?php echo (int) $post->ID; ?>\"\n                        data-nonce=\"<?php echo esc_attr( wp_create_nonce( 'kloktion_release_pending_' . $post->ID ) ); ?>\">\n                        <?php esc_html_e( 'Put back on sale', 'kloktion-dutch-auction' ); ?>\n                    <\/button>\n                <\/p>\n                <p style=\"margin:6px 0 0;font-size:13px;color:#666;\">\n                    <?php esc_html_e( 'Cancels the pending order, clears the reservation, and restarts the auction from the original start price.', 'kloktion-dutch-auction' ); ?>\n                <\/p>\n            <\/div>\n            <script>\n            (function($){\n                $(document).on('click', '.kloktion-release-pending-btn', function(e){\n                    e.preventDefault();\n                    var $btn = $(this);\n                    var reason = $('#kloktion-release-reason').val();\n                    if ( ! confirm(<?php echo wp_json_encode( __( 'Cancel the pending order and put this lot back on sale? This cannot be undone.', 'kloktion-dutch-auction' ) ); ?>) ) { return; }\n                    var $errDiv = $btn.closest('.form-field').find('.kloktion-release-error');\n                    if ( ! $errDiv.length ) {\n                        $errDiv = $('<p class=\"kloktion-release-error\" style=\"color:#c62828;margin:6px 0 0;font-size:13px;\"><\/p>').insertAfter($btn.closest('.form-field'));\n                    }\n                    $errDiv.text('').hide();\n                    $btn.prop('disabled', true).attr('aria-busy', 'true').text(<?php echo wp_json_encode( __( 'Processing...', 'kloktion-dutch-auction' ) ); ?>);\n                    $.post(ajaxurl, {\n                        action: 'kloktion_release_pending',\n                        product_id: $btn.data('product-id'),\n                        nonce: $btn.data('nonce'),\n                        reason: reason\n                    }).done(function(resp){\n                        if ( resp && resp.success ) {\n                            $btn.text(<?php echo wp_json_encode( __( 'Released. Reloading\u2026', 'kloktion-dutch-auction' ) ); ?>);\n                            setTimeout(function(){ location.reload(); }, 600);\n                        } else {\n                            var msg = (resp && resp.data && resp.data.message) || <?php echo wp_json_encode( __( 'An error occurred. Please try again.', 'kloktion-dutch-auction' ) ); ?>;\n                            $errDiv.text(msg).show();\n                            $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                        }\n                    }).fail(function(){\n                        $errDiv.text(<?php echo wp_json_encode( __( 'Network error. Please try again.', 'kloktion-dutch-auction' ) ); ?>).show();\n                        $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                    }).always(function(){\n                        $btn.removeAttr('aria-busy');\n                    });\n                });\n            })(jQuery);\n            <\/script>\n            <?php\n        }\n\n        if ( 'stopped' === $status ) {\n            $reason = get_post_meta( $product_id, '_kloktion_stop_reason', true );\n            $by     = get_post_meta( $product_id, '_kloktion_stop_by', true );\n            echo '<div class=\"options_group\">';\n            echo '<p class=\"form-field\"><label>' . esc_html__( 'Stop Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<span>' . esc_html( $reason ) . '<\/span><\/p>';\n            if ( $by ) {\n                $user = get_user_by( 'id', $by );\n                echo '<p class=\"form-field\"><label>' . esc_html__( 'Stopped By', 'kloktion-dutch-auction' ) . '<\/label>';\n                echo '<span>' . esc_html( $user ? $user->display_name : '#' . $by ) . '<\/span><\/p>';\n            }\n            echo '<\/div>';\n        }\n\n        echo '<\/div>';\n    }\n\n    public static function save_product_meta( int $post_id ): void {\n        if ( ! isset( $_POST['kloktion_product_nonce'] ) || ! wp_verify_nonce( $_POST['kloktion_product_nonce'], 'kloktion_product_save' ) ) {\n            return;\n        }\n\n        if ( ! current_user_can( 'edit_product', $post_id ) ) {\n            return;\n        }\n\n        \/\/ Check POST product-type (reliable on first publish; get_type() returns \"simple\" before term is saved).\n        $product_type = isset( $_POST['product-type'] ) ? sanitize_text_field( wp_unslash( $_POST['product-type'] ) ) : '';\n        if ( 'dutch_auction' !== $product_type ) {\n            return;\n        }\n\n        $start_price   = isset( $_POST['_kloktion_start_price'] ) ? floatval( $_POST['_kloktion_start_price'] ) : 0;\n        $no_reserve    = isset( $_POST['_kloktion_no_reserve'] ) && 'yes' === $_POST['_kloktion_no_reserve'];\n        $reserve_price = $no_reserve ? 0 : ( isset( $_POST['_kloktion_reserve_price'] ) ? floatval( $_POST['_kloktion_reserve_price'] ) : 0 );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : 0;\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n        if ( $duration <= 0 ) {\n            return;\n        }\n\n        update_post_meta( $post_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $post_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $post_id, '_kloktion_duration', $duration );\n\n        \/\/ WC price sync\n        update_post_meta( $post_id, '_regular_price', $start_price );\n        update_post_meta( $post_id, '_price', $start_price );\n\n        $current_status = Auction_Engine::get_status( $post_id );\n        $is_terminal    = in_array( $current_status, [ 'sold', 'expired', 'stopped' ], true );\n\n        $start_now = isset( $_POST['_kloktion_start_now'] ) && 'yes' === $_POST['_kloktion_start_now'];\n\n        if ( $start_now ) {\n            update_post_meta( $post_id, '_kloktion_start_time', time() );\n            update_post_meta( $post_id, '_kloktion_end_time', time() + $duration );\n\n            \/\/ Allow restart from terminal states (expired\/stopped) but not sold.\n            if ( 'active' !== $current_status && 'sold' !== $current_status ) {\n                update_post_meta( $post_id, '_kloktion_status', 'active' );\n                \/\/ Clear stale processing data.\n                delete_post_meta( $post_id, '_kloktion_processing_user' );\n                delete_post_meta( $post_id, '_kloktion_processing_since' );\n                delete_post_meta( $post_id, '_kloktion_pause_start' );\n                Logger::log( $post_id, 'active', $start_price, get_current_user_id() );\n                \/\/ Invalidate API cache.\n                delete_transient( 'kloktion_api_' . $post_id );\n                \/\/ Restore catalog visibility so restarted auction appears in shop.\n                $product = wc_get_product( $post_id );\n                if ( $product ) {\n                    $product->set_catalog_visibility( 'visible' );\n                    $product->save();\n                }\n            }\n        } elseif ( ! $is_terminal || 'stopped' === $current_status || 'expired' === $current_status ) {\n            \/\/ Allow scheduling from terminal states (except sold).\n            $schedule_date = isset( $_POST['_kloktion_schedule_date'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_date'] ) : '';\n            $schedule_time = isset( $_POST['_kloktion_schedule_time'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_time'] ) : '00:00';\n            if ( ! empty( $schedule_date ) ) {\n                $timestamp = strtotime( $schedule_date . ' ' . $schedule_time . ' UTC' );\n                if ( $timestamp ) {\n                    update_post_meta( $post_id, '_kloktion_start_time', $timestamp );\n                    update_post_meta( $post_id, '_kloktion_end_time', $timestamp + $duration );\n                    update_post_meta( $post_id, '_kloktion_status', 'scheduled' );\n                    delete_post_meta( $post_id, '_kloktion_processing_user' );\n                    delete_post_meta( $post_id, '_kloktion_processing_since' );\n                    delete_post_meta( $post_id, '_kloktion_pause_start' );\n                    Logger::log( $post_id, 'scheduled', $start_price, get_current_user_id() );\n                    delete_transient( 'kloktion_api_' . $post_id );\n                }\n            }\n        }\n    }\n\n    public static function ajax_justice_button(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $result = Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $result ) {\n            if ( $notify_seller ) {\n                self::notify_seller( $product_id, $reason, 'stopped' );\n            }\n            wp_send_json_success( 'Auction stopped.' );\n        } else {\n            wp_send_json_error( 'Cannot stop auction in its current state.' );\n        }\n    }\n\n    public static function ajax_justice_delete(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || 'dutch_auction' !== $product->get_type() ) {\n            wp_send_json_error( 'This is not a Dutch Auction product.' );\n        }\n\n        Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $notify_seller ) {\n            self::notify_seller( $product_id, $reason, 'deleted' );\n        }\n\n        \/\/ Log before deletion since the post won't exist after.\n        Logger::log( $product_id, 'deleted', 0, get_current_user_id() );\n\n        $deleted = wp_delete_post( $product_id, true );\n\n        if ( $deleted ) {\n            wp_send_json_success( 'Auction permanently deleted.' );\n        } else {\n            wp_send_json_error( 'Failed to delete the auction product.' );\n        }\n    }\n\n    private static function notify_seller( int $product_id, string $reason, string $action ): void {\n        $product = wc_get_product( $product_id );\n        if ( ! $product ) {\n            return;\n        }\n\n        $author_id = get_post_field( 'post_author', $product_id );\n        $seller    = get_user_by( 'id', $author_id );\n        if ( ! $seller || ! $seller->user_email ) {\n            return;\n        }\n\n        $action_label = 'deleted' === $action ? __( 'deleted', 'kloktion-dutch-auction' ) : __( 'stopped', 'kloktion-dutch-auction' );\n        $subject      = sprintf(\n            __( 'Your auction \"%s\" has been %s', 'kloktion-dutch-auction' ),\n            $product->get_name(),\n            $action_label\n        );\n        $message = sprintf(\n            __( \"Hello %s,\\n\\nYour auction \\\"%s\\\" has been %s by the site administrator.\\n\\nReason: %s\\n\\nIf you have questions, please contact the marketplace support.\\n\\nRegards,\\n%s\", 'kloktion-dutch-auction' ),\n            $seller->display_name,\n            $product->get_name(),\n            $action_label,\n            $reason,\n            get_bloginfo( 'name' )\n        );\n\n        wp_mail( $seller->user_email, $subject, $message );\n    }\n\n    public static function add_log_metabox(): void {\n        add_meta_box(\n            'kloktion_auction_log',\n            __( 'Auction Log', 'kloktion-dutch-auction' ),\n            [ __CLASS__, 'render_log_metabox' ],\n            'product',\n            'normal',\n            'low'\n        );\n    }\n\n    public static function render_log_metabox( $post ): void {\n        $product = wc_get_product( $post->ID );\n        if ( ! $product instanceof Product_Type ) {\n            echo '<p>' . esc_html__( 'This is not a Dutch Auction product.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        $logs = Logger::get_log( $post->ID, 30 );\n\n        if ( empty( $logs ) ) {\n            echo '<p>' . esc_html__( 'No auction events logged yet.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        echo '<table class=\"widefat striped\"><thead><tr>';\n        echo '<th>' . esc_html__( 'Date', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Event', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Price', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'User', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<\/tr><\/thead><tbody>';\n\n        foreach ( $logs as $log ) {\n            $user = $log->user_id ? get_user_by( 'id', $log->user_id ) : null;\n            echo '<tr>';\n            echo '<td>' . esc_html( $log->created_at ) . '<\/td>';\n            echo '<td><code>' . esc_html( $log->event ) . '<\/code><\/td>';\n            echo '<td>' . ( $log->price_at_event ? wp_kses_post( wc_price( $log->price_at_event ) ) : '\u2014' ) . '<\/td>';\n            echo '<td>' . esc_html( $user ? $user->display_name : ( $log->user_id ?: '\u2014' ) ) . '<\/td>';\n            echo '<\/tr>';\n        }\n\n        echo '<\/tbody><\/table>';\n    }\n\n    public static function render_dashboard(): void {\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/dashboard.php';\n    }\n\n    public static function render_moderation_queue(): void {\n        global $wpdb;\n\n        $table        = $wpdb->prefix . 'kloktion_moderation_queue';\n        $pending_items = $wpdb->get_results(\n            \"SELECT * FROM {$table} WHERE status = 'pending' ORDER BY submitted_at DESC\"\n        );\n\n        require KLOKTION_PLUGIN_DIR . 'admin\/views\/moderation-queue.php';\n    }\n\n    public static function ajax_moderation_approve(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id    = (int) $row->product_id;\n        $submitted_data = json_decode( $row->submitted_data, true );\n\n        \/\/ Stale queue guard: the product may have moved past pending_review (e.g. sold while in queue).\n        $current_kloktion_status = get_post_meta( $product_id, '_kloktion_status', true );\n        $terminal_states = [ 'sold', 'active', 'paused', 'processing', 'expired' ];\n        if ( in_array( $current_kloktion_status, $terminal_states, true ) ) {\n            \/\/ Clean up the orphan queue row.\n            $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n            wp_send_json_error( sprintf(\n                'Product is no longer eligible for moderation (current status: %s). Queue row removed.',\n                $current_kloktion_status\n            ) );\n        }\n\n        \/\/ Apply each meta key\/value from submitted data (blacklist managed fields).\n        if ( is_array( $submitted_data ) ) {\n            $blacklist = [ '_kloktion_status' ]; \/\/ managed separately via transition_status\n            foreach ( $submitted_data as $meta_key => $meta_value ) {\n                $key = sanitize_key( $meta_key );\n                if ( in_array( $key, $blacklist, true ) ) {\n                    continue;\n                }\n                \/\/ Normalize _kloktion_is_auction to '1' (force_auction_product_type does strict === '1' check).\n                if ( '_kloktion_is_auction' === $key && in_array( $meta_value, [ 'yes', 'true', true, 1 ], true ) ) {\n                    $meta_value = '1';\n                }\n                update_post_meta( $product_id, $key, $meta_value );\n            }\n        }\n\n        \/\/ Ensure _kloktion_status is 'pending_review' before transitioning so the\n        \/\/ valid_transitions table always has a matching entry. Without this, if submitted_data\n        \/\/ overwrote the status to something unexpected (or the meta was missing) the\n        \/\/ transition would silently return false and the status would stay wrong.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Determine target status based on start_time.\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        if ( $start_time <= 0 ) {\n            \/\/ No start date submitted (vendor form has no date picker) \u2192 start now.\n            $start_time = time();\n            update_post_meta( $product_id, '_kloktion_start_time', $start_time );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_time + $duration );\n            }\n            $new_status = 'active';\n        } else {\n            $new_status = ( $start_time <= time() ) ? 'active' : 'scheduled';\n        }\n        Auction_Engine::transition_status( $product_id, $new_status );\n\n        \/\/ Publish the WC post so it appears on the shop page and in the vendor dashboard.\n        \/\/ Vendor-submitted products land as 'pending'; approving must flip them to 'publish'.\n        \/\/ We call wp_update_post directly here (admin context, no Dokan hooks involved).\n        $post = get_post( $product_id );\n        if ( $post && 'publish' !== $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'publish',\n            ] );\n        }\n\n        \/\/ Restore catalog visibility (sync_catalog_visibility hook only fires when transitioning\n        \/\/ OUT of sold\/expired\/stopped \u2014 but for first-time approval from pending_review, that\n        \/\/ listener is a no-op, so set it explicitly).\n        $product_obj = wc_get_product( $product_id );\n        if ( $product_obj ) {\n            $product_obj->set_catalog_visibility( 'visible' );\n            $product_obj->save();\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'approved',\n                'admin_id'   => get_current_user_id(),\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_approved', $product_id );\n\n        wp_send_json_success( [ 'message' => __( 'Auction approved and scheduled.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_moderation_reject(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        $reason   = isset( $_POST['reason'] ) ? sanitize_textarea_field( wp_unslash( $_POST['reason'] ) ) : '';\n\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n        if ( empty( $reason ) ) {\n            wp_send_json_error( 'Rejection reason is required.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id = (int) $row->product_id;\n\n        \/\/ Transition product back to stopped.\n        Auction_Engine::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => $reason,\n            '_kloktion_stop_by'     => get_current_user_id(),\n        ] );\n\n        \/\/ If product was never published (vendor's first submission), move to draft so the\n        \/\/ vendor can find, edit, and resubmit. Otherwise leave post_status as-is.\n        $post = get_post( $product_id );\n        if ( $post && 'pending' === $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'draft',\n            ] );\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'rejected',\n                'admin_id'   => get_current_user_id(),\n                'notes'      => $reason,\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_rejected', $product_id, $reason );\n\n        wp_send_json_success( [ 'message' => __( 'Auction rejected.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_disputes_page(): void {\n        global $wpdb;\n        $disputes_table = $wpdb->prefix . 'kloktion_disputes';\n        $escrow_table   = $wpdb->prefix . 'kloktion_escrow';\n\n        \/\/ Handle view detail \/ resolve actions.\n        $view_id = isset( $_GET['view'] ) ? (int) $_GET['view'] : 0;\n\n        if ( $view_id > 0 ) {\n            $dispute = $wpdb->get_row( $wpdb->prepare(\n                \"SELECT d.*, e.amount, e.currency, e.vendor_id, e.product_id, e.charge_id, e.status as escrow_status\n                 FROM $disputes_table d\n                 LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n                 WHERE d.id = %d\",\n                $view_id\n            ) );\n            if ( ! $dispute ) {\n                echo '<div class=\"wrap\"><h1>' . esc_html__( 'Dispute not found', 'kloktion-dutch-auction' ) . '<\/h1><\/div>';\n                return;\n            }\n            include KLOKTION_PLUGIN_DIR . 'admin\/views\/dispute-detail.php';\n            return;\n        }\n\n        \/\/ List view \u2014 open disputes first, then resolved.\n        $disputes = $wpdb->get_results(\n            \"SELECT d.*, e.amount, e.currency, e.vendor_id\n             FROM $disputes_table d\n             LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n             ORDER BY CASE d.status WHEN 'open' THEN 0 ELSE 1 END, d.created_at DESC\n             LIMIT 100\"\n        );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/disputes-list.php';\n    }\n\n    public static function ajax_dispute_resolve_release(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Release escrow (funds go to seller).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            \\Kloktion\\Stripe_Payment::release_escrow( $dispute->escrow_id, 'admin_release' );\n        }\n\n        \/\/ Mark dispute resolved.\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_release',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_release', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Dispute resolved \u2014 funds released to seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_dispute_resolve_refund(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Refund via Stripe (reverses the destination charge).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            $refund = \\Kloktion\\Stripe_Payment::refund_payment( $dispute->escrow_id, $notes );\n            if ( is_wp_error( $refund ) ) {\n                wp_send_json_error( [ 'message' => 'Refund failed: ' . $refund->get_error_message() ] );\n            }\n        }\n\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_refund',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_refund', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Buyer refunded \u2014 funds reversed from seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/**\n     * R12: Manually release a stuck pending_purchase lot and restart the auction.\n     *\/\n    public static function ajax_release_pending(): void {\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $nonce      = isset( $_POST['nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';\n        $reason     = isset( $_POST['reason'] ) ? sanitize_key( wp_unslash( $_POST['reason'] ) ) : 'admin_decision';\n\n        if ( ! $product_id || ! wp_verify_nonce( $nonce, 'kloktion_release_pending_' . $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => __( 'Permission denied.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        \/\/ FIX A1: Atomic SQL claim \u2014 replaces in-process wp_cache_add lock.\n        \/\/ Only ONE caller can flip pending_purchase \u2192 releasing; concurrent requests get 409.\n        global $wpdb;\n        $rows = $wpdb->query( $wpdb->prepare(\n            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n            'releasing',\n            $product_id,\n            '_kloktion_status',\n            'pending_purchase'\n        ) );\n        if ( 1 !== (int) $rows ) {\n            wp_send_json_error( [ 'message' => __( 'Auction state changed. Reload and retry.', 'kloktion-dutch-auction' ) ], 409 );\n        }\n        \/\/ Flush WP object cache so subsequent get_post_meta reads reflect 'releasing'.\n        wp_cache_delete( $product_id, 'post_meta' );\n\n        \/\/ Whitelist reason values.\n        $allowed_reasons = [ 'penalty_unpaid', 'seller_request', 'admin_decision' ];\n        if ( ! in_array( $reason, $allowed_reasons, true ) ) {\n            $reason = 'admin_decision';\n        }\n\n        \/\/ Cancel pending order.\n        $order_id = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n        if ( $order_id && function_exists( 'wc_get_order' ) ) {\n            $order = wc_get_order( $order_id );\n            if ( $order ) {\n                \/\/ Marker is written UNCONDITIONALLY so late async webhooks on already-cancelled\/failed\n                \/\/ orders still hit the checkout-handler guard and cannot re-trigger the sale.\n                $order->update_meta_data( '_kloktion_released_by_admin', '1' );\n                $order->update_meta_data( '_kloktion_release_reason', $reason );\n                $order->save();\n\n                if ( ! in_array( $order->get_status(), [ 'cancelled', 'refunded', 'failed' ], true ) ) {\n                    $cancel_result = $order->update_status(\n                        'cancelled',\n                        sprintf(\n                            \/* translators: %s: reason key *\/\n                            __( 'Admin released pending purchase. Reason: %s', 'kloktion-dutch-auction' ),\n                            $reason\n                        )\n                    );\n                    if ( ! $cancel_result ) {\n                        \/\/ Rollback: restore pending_purchase so admin can retry.\n                        $wpdb->query( $wpdb->prepare(\n                            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                            'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n                        ) );\n                        wp_cache_delete( $product_id, 'post_meta' );\n                        wp_send_json_error( [ 'message' => __( 'Failed to cancel the pending order. No changes made.', 'kloktion-dutch-auction' ) ], 500 );\n                    }\n                }\n            }\n        }\n\n        \/\/ Clear pending meta.\n        delete_post_meta( $product_id, '_kloktion_pending_user' );\n        delete_post_meta( $product_id, '_kloktion_pending_order' );\n        delete_post_meta( $product_id, '_kloktion_pending_price' );\n        delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n\n        \/\/ Reset auction price + time.\n        $start_price = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $duration    = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n        $now         = time();\n\n        if ( $start_price <= 0 ) {\n            \/\/ Rollback: cannot restart without a valid start price.\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Auction has no start price configured. Cannot restart.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_current_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_start_time', $now );\n        if ( $duration > 0 ) {\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n        }\n\n        \/\/ Transition status: releasing \u2192 active (via transition table).\n        $transitioned = \\Kloktion\\Auction_Engine::transition_status( $product_id, 'active', [] );\n        if ( ! $transitioned ) {\n            \/\/ Rollback: transition blocked (edge case \u2014 status may have been mutated externally).\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Transition to active failed. Auction status restored. Reload and retry.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        \/\/ Log the admin action.\n        Logger::log(\n            $product_id,\n            'admin_release_pending',\n            $start_price,\n            get_current_user_id(),\n            [ 'reason' => $reason, 'cancelled_order' => $order_id ]\n        );\n\n        wp_send_json_success( [ 'message' => __( 'Auction released and restarted.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_settings(): void {\n        if ( isset( $_POST['kloktion_settings_nonce'] ) && wp_verify_nonce( $_POST['kloktion_settings_nonce'], 'kloktion_save_settings' ) && current_user_can( 'manage_woocommerce' ) ) {\n            $settings = [\n                'global_pause'            => ! empty( $_POST['global_pause'] ) ? 1 : 0,\n                'default_duration'        => absint( $_POST['default_duration'] ?? 86400 ),\n                'pause_duration'          => absint( $_POST['pause_duration'] ?? 180 ),\n                'freeze_timeout'          => absint( $_POST['freeze_timeout'] ?? 600 ),\n                'rate_limit'              => absint( $_POST['rate_limit'] ?? 60 ),\n                'poll_interval'           => absint( $_POST['poll_interval'] ?? 2 ),\n                'processing_timeout'      => absint( $_POST['processing_timeout'] ?? 900 ),\n                'moderation_enabled'      => ! empty( $_POST['moderation_enabled'] ) ? 1 : 0,\n                'escrow_enabled'          => ! empty( $_POST['escrow_enabled'] ) ? 1 : 0,\n                'stripe_platform_secret'  => sanitize_text_field( $_POST['stripe_platform_secret'] ?? '' ),\n                'stripe_webhook_secret'   => sanitize_text_field( $_POST['stripe_webhook_secret'] ?? '' ),\n                'commission_percent'      => max( 0, min( 100, (float) ( $_POST['commission_percent'] ?? 10 ) ) ),\n                'dispute_window_days'     => max( 1, min( 60, (int) ( $_POST['dispute_window_days'] ?? 7 ) ) ),\n                'auto_release_days'       => max( 1, min( 60, (int) ( $_POST['auto_release_days'] ?? 10 ) ) ),\n            ];\n            update_option( 'kloktion_settings', $settings );\n            \/\/ reCAPTCHA keys stored as standalone options (not inside $settings array).\n            update_option( 'kloktion_recaptcha_site_key', sanitize_text_field( $_POST['kloktion_recaptcha_site_key'] ?? '' ) );\n            update_option( 'kloktion_recaptcha_secret_key', sanitize_text_field( $_POST['kloktion_recaptcha_secret_key'] ?? '' ) );\n            echo '<div class=\"updated\"><p>' . esc_html__( 'Settings saved.', 'kloktion-dutch-auction' ) . '<\/p><\/div>';\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/settings.php';\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:46","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Auction_Engine {\n\n    private static $valid_transitions = [\n        'scheduled'        => [ 'active', 'stopped', 'pending_review' ],\n        'active'           => [ 'paused', 'sold', 'stopped', 'processing', 'expired' ],\n        'paused'           => [ 'sold', 'expired', 'stopped', 'processing' ],\n        'processing'       => [ 'sold', 'active', 'paused', 'stopped', 'pending_purchase' ],\n        'pending_purchase' => [ 'sold', 'expired', 'stopped', 'active', 'paused', 'releasing' ],\n        'releasing'        => [ 'active', 'pending_purchase' ],\n        'expired'          => [ 'active', 'scheduled', 'pending_review' ],\n        'stopped'          => [ 'active', 'scheduled', 'pending_review' ],\n        'pending_review'   => [ 'active', 'scheduled', 'stopped' ],\n    ];\n\n    public static function calculate_price( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $frozen = get_post_meta( $product_id, '_kloktion_pending_price', true );\n            return '' !== $frozen ? (float) $frozen : (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        if ( ! in_array( $status, [ 'active', 'processing' ], true ) ) {\n            return (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        }\n\n        $start_price   = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $start_time    = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration      = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return $start_price;\n        }\n\n        $elapsed = time() - $start_time;\n\n        if ( $elapsed <= 0 ) {\n            return $start_price;\n        }\n\n        if ( $elapsed >= $duration ) {\n            return $reserve_price;\n        }\n\n        $price = $start_price - ( ( $start_price - $reserve_price ) * ( $elapsed \/ $duration ) );\n        return round( max( $price, $reserve_price ), 2 );\n    }\n\n    public static function get_status( int $product_id ): string {\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        return $status ?: 'scheduled';\n    }\n\n    public static function get_time_remaining( int $product_id ): int {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            $remaining   = $pause_dur - ( time() - $pause_start );\n            return max( 0, $remaining );\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            $deadline = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n            return $deadline > 0 ? max( 0, $deadline - time() ) : 0;\n        }\n\n        if ( 'active' === $status || 'processing' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $remaining  = ( $start_time + $duration ) - time();\n            return max( 0, $remaining );\n        }\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            return max( 0, $start_time - time() );\n        }\n\n        return 0;\n    }\n\n    public static function get_progress( int $product_id ): float {\n        $status = self::get_status( $product_id );\n\n        if ( 'paused' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'pending_purchase' === $status ) {\n            return 1.0;\n        }\n\n        if ( 'active' !== $status && 'processing' !== $status ) {\n            return 0.0;\n        }\n\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n\n        if ( $duration <= 0 ) {\n            return 0.0;\n        }\n\n        $elapsed  = time() - $start_time;\n        $progress = $elapsed \/ $duration;\n\n        return round( max( 0.0, min( 1.0, $progress ) ), 4 );\n    }\n\n    public static function transition_status( int $product_id, string $new_status, array $meta = [] ): bool {\n        $current = self::get_status( $product_id );\n\n        \/\/ Already in target status \u2014 skip but don't update meta (prevents double-sell overwriting sold_to).\n        if ( $current === $new_status ) {\n            return false;\n        }\n\n        $allowed = self::$valid_transitions[ $current ] ?? [];\n        if ( ! in_array( $new_status, $allowed, true ) ) {\n            return false;\n        }\n\n        update_post_meta( $product_id, '_kloktion_status', $new_status );\n\n        foreach ( $meta as $key => $value ) {\n            update_post_meta( $product_id, $key, $value );\n        }\n\n        $price = self::calculate_price( $product_id );\n        Logger::log( $product_id, $new_status, $price, get_current_user_id() ?: null, $meta );\n\n        do_action( 'kloktion_auction_' . $new_status, $product_id );\n        do_action( 'kloktion_status_changed', $product_id, $new_status, $current );\n\n        \/\/ Invalidate API cache.\n        delete_transient( 'kloktion_api_' . $product_id );\n\n        return true;\n    }\n\n    public static function start_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'active', [\n            '_kloktion_start_time' => time(),\n        ] );\n    }\n\n    public static function pause_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'paused', [\n            '_kloktion_pause_start' => time(),\n        ] );\n    }\n\n    public static function expire_auction( int $product_id ): bool {\n        return self::transition_status( $product_id, 'expired' );\n    }\n\n    public static function stop_auction( int $product_id, int $admin_id, string $reason ): bool {\n        return self::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => sanitize_text_field( $reason ),\n            '_kloktion_stop_by'     => $admin_id,\n        ] );\n    }\n\n    public static function sell_auction( int $product_id, int $buyer_id, float $price ): bool {\n        return self::transition_status( $product_id, 'sold', [\n            '_kloktion_sold_price' => $price,\n            '_kloktion_sold_to'    => $buyer_id,\n            '_kloktion_sold_at'    => time(),\n        ] );\n    }\n\n    public static function mark_pending_purchase( int $product_id, int $buyer_id, int $order_id, float $price ): bool {\n        $deadline = time() + ( 96 * HOUR_IN_SECONDS );\n\n        return self::transition_status( $product_id, 'pending_purchase', [\n            '_kloktion_pending_user'     => $buyer_id,\n            '_kloktion_pending_order'    => $order_id,\n            '_kloktion_pending_price'    => $price,\n            '_kloktion_payment_deadline' => $deadline,\n        ] );\n    }\n\n    public static function check_auction( int $product_id ): void {\n        $status = self::get_status( $product_id );\n\n        if ( 'scheduled' === $status ) {\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            if ( $start_time > 0 && $start_time <= time() ) {\n                self::transition_status( $product_id, 'active' );\n            }\n        } elseif ( 'active' === $status ) {\n            $price      = self::calculate_price( $product_id );\n            $reserve    = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n            $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n            $duration   = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            $time_up    = $duration > 0 && time() >= $start_time + $duration;\n\n            if ( $reserve > 0 && $price <= $reserve ) {\n                self::pause_auction( $product_id );\n            } elseif ( $time_up ) {\n                \/\/ Duration exceeded: expire directly (no-reserve) or expire if stuck.\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'paused' === $status ) {\n            $pause_start = (int) get_post_meta( $product_id, '_kloktion_pause_start', true );\n            $settings    = get_option( 'kloktion_settings', [] );\n            $pause_dur   = (int) ( $settings['pause_duration'] ?? 180 );\n            if ( time() - $pause_start >= $pause_dur ) {\n                self::expire_auction( $product_id );\n            }\n        } elseif ( 'pending_purchase' === $status ) {\n            \/\/ The buyer owns a 96-hour payment window. Penalty handling is done by\n            \/\/ check_unpaid_wins(); keep the auction unavailable until admin\/vendor action.\n            return;\n        } elseif ( 'processing' === $status ) {\n            $since    = (int) get_post_meta( $product_id, '_kloktion_processing_since', true );\n            $settings = get_option( 'kloktion_settings', [] );\n            $timeout  = (int) ( $settings['processing_timeout'] ?? 300 );\n            if ( time() - $since >= $timeout ) {\n                $was_paused = self::calculate_price( $product_id ) <= (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n                $restore    = $was_paused ? 'paused' : 'active';\n\n                if ( 'paused' === $restore ) {\n                    \/\/ reset pause_start for expiry timer\n                    self::transition_status( $product_id, 'paused', [\n                        '_kloktion_pause_start' => time(),\n                    ] );\n                } else {\n                    self::transition_status( $product_id, 'active' );\n                }\n\n                delete_post_meta( $product_id, '_kloktion_processing_user' );\n                delete_post_meta( $product_id, '_kloktion_processing_since' );\n            }\n        }\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:47","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Checkout_Handler {\n\n    public static function init(): void {\n        add_action( 'woocommerce_checkout_process', [ __CLASS__, 'validate_checkout' ] );\n        add_action( 'woocommerce_after_checkout_validation', [ __CLASS__, 'release_locks_on_error' ], 10, 2 );\n        add_action( 'woocommerce_checkout_create_order_line_item', [ __CLASS__, 'add_order_item_meta' ], 10, 4 );\n        add_action( 'woocommerce_payment_complete', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_failed', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_cancelled', [ __CLASS__, 'handle_payment_failed' ] );\n        add_action( 'woocommerce_order_status_completed', [ __CLASS__, 'handle_payment_complete' ] );\n        add_action( 'woocommerce_order_status_processing', [ __CLASS__, 'handle_payment_complete' ] );\n\n        \/\/ prevent double-sell on order-pay\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'validate_order_pay' ] );\n\n        \/\/ Show payment method on thank-you page for auction orders.\n        add_action( 'woocommerce_order_details_after_order_table', [ __CLASS__, 'show_payment_method' ] );\n\n        \/\/ Show auction notice on order-pay page.\n        add_action( 'before_woocommerce_pay', [ __CLASS__, 'show_order_pay_notice' ], 5 );\n    }\n\n    public static function acquire_lock( int $product_id, int $user_id ): bool {\n        global $wpdb;\n\n        $affected = $wpdb->query(\n            $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta}\n                 SET meta_value = 'processing'\n                 WHERE post_id = %d\n                   AND meta_key = '_kloktion_status'\n                   AND meta_value IN ('active', 'paused')\",\n                $product_id\n            )\n        );\n\n        if ( 1 === $affected ) {\n            \/\/ Flush WP object cache after direct SQL so get_post_meta reads fresh data.\n            wp_cache_delete( $product_id, 'post_meta' );\n\n            update_post_meta( $product_id, '_kloktion_processing_user', $user_id );\n            update_post_meta( $product_id, '_kloktion_processing_since', time() );\n\n            Logger::log( $product_id, 'lock_acquired', Auction_Engine::calculate_price( $product_id ), $user_id );\n            delete_transient( 'kloktion_api_' . $product_id );\n\n            return true;\n        }\n\n        return false;\n    }\n\n    public static function release_lock( int $product_id ): void {\n        $reserve = (float) get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $price   = Auction_Engine::calculate_price( $product_id );\n\n        \/\/ Determine what status to restore.\n        $restore = ( $price <= $reserve ) ? 'paused' : 'active';\n\n        \/\/ Direct update to bypass transition validation (processing \u2192 active\/paused).\n        update_post_meta( $product_id, '_kloktion_status', $restore );\n\n        if ( 'paused' === $restore && ! get_post_meta( $product_id, '_kloktion_pause_start', true ) ) {\n            update_post_meta( $product_id, '_kloktion_pause_start', time() );\n        }\n\n        delete_post_meta( $product_id, '_kloktion_processing_user' );\n        delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n        Logger::log( $product_id, 'lock_released', $price );\n        delete_transient( 'kloktion_api_' . $product_id );\n    }\n\n    \/\/ acquire locks; release all on failure\n    public static function validate_checkout(): void {\n        if ( ! WC()->cart ) {\n            return;\n        }\n\n        $user_id      = get_current_user_id();\n        $locked_ids   = [];\n\n        foreach ( WC()->cart->get_cart() as $key => $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n\n            if ( ! self::acquire_lock( $product_id, $user_id ?: 0 ) ) {\n                foreach ( $locked_ids as $locked_id ) {\n                    self::release_lock( $locked_id );\n                }\n\n                throw new \\Exception(\n                    sprintf(\n                        __( 'Sorry, the auction for \"%s\" has already been purchased by another buyer.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n            }\n\n            $locked_ids[] = $product_id;\n        }\n    }\n\n    \/**\n     * Release any auction locks if WC checkout validation produced errors.\n     * Prevents orphaned locks when a required field is missing.\n     *\/\n    public static function release_locks_on_error( array $data, \\WP_Error $errors ): void {\n        if ( ! $errors->has_errors() || ! WC()->cart ) {\n            return;\n        }\n\n        foreach ( WC()->cart->get_cart() as $item ) {\n            if ( ! isset( $item['kloktion_product_id'] ) ) {\n                continue;\n            }\n\n            $product_id = (int) $item['kloktion_product_id'];\n            $status     = Auction_Engine::get_status( $product_id );\n\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === get_current_user_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function validate_order_pay(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n            $current_user    = get_current_user_id();\n\n            if ( in_array( $status, [ 'sold', 'expired', 'stopped' ], true ) ) {\n                $order->update_status( 'cancelled', __( 'Auction is no longer available.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'This auction has already ended. Your order has been cancelled.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $deadline      = (int) get_post_meta( $product_id, '_kloktion_payment_deadline', true );\n\n                if ( $pending_order === $order_id && $pending_user === $current_user && ( ! $deadline || $deadline >= time() ) ) {\n                    continue;\n                }\n\n                wc_add_notice( __( 'This auction payment window is no longer available.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n\n            \/\/ Block payment unless this user currently holds the processing lock.\n            \/\/ Covers: lock expired and auction returned to active\/paused, or another user holds it.\n            if ( 'processing' !== $status || $processing_user !== $current_user ) {\n                $order->update_status( 'cancelled', __( 'Your price lock has expired. Order cancelled.', 'kloktion-dutch-auction' ) );\n                wc_add_notice( __( 'Your price lock has expired. Please add the item to your cart again.', 'kloktion-dutch-auction' ), 'error' );\n                wp_safe_redirect( wc_get_account_endpoint_url( 'orders' ) );\n                exit;\n            }\n        }\n    }\n\n    public static function add_order_item_meta( $item, $cart_item_key, $values, $order ): void {\n        if ( ! isset( $values['kloktion_frozen_price'] ) ) {\n            return;\n        }\n\n        $start_price = (float) get_post_meta( $values['kloktion_product_id'], '_kloktion_start_price', true );\n        $frozen      = (float) $values['kloktion_frozen_price'];\n        $savings     = $start_price - $frozen;\n        $pct         = $start_price > 0 ? round( ( $savings \/ $start_price ) * 100, 1 ) : 0;\n\n        $item->add_meta_data( '_kloktion_frozen_price', $frozen );\n        $item->add_meta_data( '_kloktion_start_price', $start_price );\n        $item->add_meta_data( '_kloktion_savings', $savings );\n        $item->add_meta_data( '_kloktion_savings_percent', $pct );\n        $item->add_meta_data( '_kloktion_product_id', (int) $values['kloktion_product_id'] );\n    }\n\n    public static function handle_payment_complete( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        \/\/ already processed\n        if ( $order->get_meta( '_kloktion_sale_finalized' ) ) {\n            return;\n        }\n\n        \/\/ FIX A2: Block late async payments (SEPA \/ 3DS retry) for orders released by admin.\n        \/\/ An admin may release a stuck pending_purchase, cancel the order, and restart the\n        \/\/ auction. A delayed payment webhook for the OLD cancelled order must not re-sell the lot.\n        \/\/ If the payment actually settled, auto-refund the customer.\n        if ( '1' === (string) $order->get_meta( '_kloktion_released_by_admin' ) ) {\n            $reason = (string) $order->get_meta( '_kloktion_release_reason' );\n            \/\/ Determine product_id for logging (best-effort from first auction item).\n            $product_id = 0;\n            foreach ( $order->get_items() as $_item ) {\n                $_pid = (int) $_item->get_meta( '_kloktion_product_id' );\n                if ( $_pid ) {\n                    $product_id = $_pid;\n                    break;\n                }\n            }\n            \/\/ Refund the customer if the payment actually settled.\n            if ( $order->is_paid() && function_exists( 'wc_create_refund' ) ) {\n                $refund = wc_create_refund( [\n                    'amount'         => $order->get_total(),\n                    'reason'         => sprintf(\n                        \/* translators: %s: release reason key *\/\n                        __( 'Auction released by admin (%s) before payment settled.', 'kloktion-dutch-auction' ),\n                        $reason\n                    ),\n                    'order_id'       => $order->get_id(),\n                    'refund_payment' => true,\n                    'restock_items'  => false,\n                ] );\n                if ( is_wp_error( $refund ) ) {\n                    $order->update_status( 'failed', sprintf(\n                        \/* translators: %s: error message *\/\n                        __( 'Released-order auto-refund failed: %s. Manual refund required.', 'kloktion-dutch-auction' ),\n                        $refund->get_error_message()\n                    ) );\n                    if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                        \\Kloktion\\Logger::log( $product_id, 'released_order_refund_failed', null, $order->get_user_id(), [\n                            'order_id' => $order->get_id(),\n                            'error'    => $refund->get_error_message(),\n                        ] );\n                    }\n                } else {\n                    if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                        \\Kloktion\\Logger::log( $product_id, 'released_order_refunded', (float) $order->get_total(), $order->get_user_id(), [\n                            'order_id'  => $order->get_id(),\n                            'refund_id' => $refund->get_id(),\n                            'reason'    => $reason,\n                        ] );\n                    }\n                }\n            } else {\n                if ( class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'released_order_payment_rejected', null, $order->get_user_id(), [\n                        'order_id' => $order->get_id(),\n                        'reason'   => $reason,\n                    ] );\n                }\n            }\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n\n            if ( ! in_array( $status, [ 'processing', 'pending_purchase', 'active', 'paused' ], true ) ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" is no longer available (status: %s). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id ),\n                        $status\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', null, $order->get_customer_id(), [\n                    'order_id'       => $order_id,\n                    'auction_status' => $status,\n                ] );\n                return;\n            }\n\n            if ( 'processing' === $status ) {\n                $processing_user = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                $buyer_id        = $order->get_customer_id();\n                if ( $processing_user && $processing_user !== $buyer_id ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'Another buyer holds the lock for this auction. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            if ( 'pending_purchase' === $status ) {\n                $pending_user  = (int) get_post_meta( $product_id, '_kloktion_pending_user', true );\n                $pending_order = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n                $buyer_id      = (int) $order->get_customer_id();\n\n                if ( ( $pending_user && $pending_user !== $buyer_id ) || ( $pending_order && $pending_order !== $order_id ) ) {\n                    $order->update_status(\n                        'cancelled',\n                        __( 'This auction is reserved for another pending purchase. Order auto-cancelled.', 'kloktion-dutch-auction' )\n                    );\n                    return;\n                }\n            }\n\n            $frozen = (float) $item->get_meta( '_kloktion_frozen_price' );\n            $start  = (float) $item->get_meta( '_kloktion_start_price' );\n            $pct    = (float) $item->get_meta( '_kloktion_savings_percent' );\n\n            $buyer_id = $order->get_customer_id();\n            $sold = Auction_Engine::sell_auction( $product_id, $buyer_id, $frozen );\n\n            if ( ! $sold ) {\n                $order->update_status(\n                    'cancelled',\n                    sprintf(\n                        __( 'Auction \"%s\" could not be finalized (already sold or ended). Order auto-cancelled.', 'kloktion-dutch-auction' ),\n                        get_the_title( $product_id )\n                    )\n                );\n                Logger::log( $product_id, 'double_sell_blocked', $frozen, $buyer_id, [\n                    'order_id' => $order_id,\n                    'reason'   => 'sell_auction_failed',\n                ] );\n                return;\n            }\n\n            $order->add_order_note(\n                sprintf(\n                    __( 'Dutch Auction purchase: %s at %s (started at %s, savings %s%%)', 'kloktion-dutch-auction' ),\n                    get_the_title( $product_id ),\n                    wc_price( $frozen ),\n                    wc_price( $start ),\n                    $pct\n                )\n            );\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n            delete_post_meta( $product_id, '_kloktion_pending_user' );\n            delete_post_meta( $product_id, '_kloktion_pending_order' );\n            delete_post_meta( $product_id, '_kloktion_pending_price' );\n            delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n        }\n\n        $order->update_meta_data( '_kloktion_sale_finalized', time() );\n        $order->save();\n    }\n\n    public static function handle_payment_failed( int $order_id ): void {\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        foreach ( $order->get_items() as $item ) {\n            $product_id = (int) $item->get_meta( '_kloktion_product_id' );\n            if ( ! $product_id ) {\n                continue;\n            }\n\n            $status = Auction_Engine::get_status( $product_id );\n            if ( 'processing' === $status ) {\n                $lock_owner = (int) get_post_meta( $product_id, '_kloktion_processing_user', true );\n                if ( $lock_owner === (int) $order->get_customer_id() ) {\n                    self::release_lock( $product_id );\n                }\n            }\n        }\n    }\n\n    public static function show_order_pay_notice(): void {\n        global $wp;\n\n        $order_id = absint( $wp->query_vars['order-pay'] ?? 0 );\n        if ( ! $order_id ) {\n            return;\n        }\n\n        $order = wc_get_order( $order_id );\n        if ( ! $order ) {\n            return;\n        }\n\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            if ( $item->get_meta( '_kloktion_product_id' ) ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( $has_auction ) {\n            printf(\n                '<div class=\"woocommerce-info kloktion-pay-notice\">%s<\/div>',\n                esc_html__( 'This lot is reserved for you. Please complete payment within 96 hours to avoid a penalty.', 'kloktion-dutch-auction' )\n            );\n        }\n    }\n\n    public static function show_payment_method( $order ): void {\n        if ( ! $order instanceof \\WC_Order ) {\n            return;\n        }\n\n        \/\/ Only show for orders containing auction products.\n        $has_auction = false;\n        foreach ( $order->get_items() as $item ) {\n            $product = $item->get_product();\n            if ( $product instanceof Product_Type ) {\n                $has_auction = true;\n                break;\n            }\n        }\n\n        if ( ! $has_auction ) {\n            return;\n        }\n\n        $method = $order->get_payment_method_title();\n        if ( $method ) {\n            printf(\n                '<p class=\"kloktion-payment-method\"><strong>%s<\/strong> %s<\/p>',\n                esc_html__( 'Payment method:', 'kloktion-dutch-auction' ),\n                esc_html( $method )\n            );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:47","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Dokan {\n\n    public static function init(): void {\n        if ( ! class_exists( 'WeDevs_Dokan' ) ) {\n            return;\n        }\n\n        add_action( 'dokan_new_product_after_product_tags', [ __CLASS__, 'vendor_product_fields' ] );\n        add_action( 'dokan_product_edit_after_product_tags', [ __CLASS__, 'vendor_product_fields' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'dokan_product_updated',   [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'wp_head',                  [ __CLASS__, 'inject_vendor_dashboard_styles' ] );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'save_post_product', [ __CLASS__, 'force_auction_product_type' ], 999, 1 );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_dashboard_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'load_dashboard_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_payouts_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_payouts_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'render_payouts_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_exit_dashboard_nav' ], 99 );\n\n        \/\/ Dokan blocks vendor's own products; allow dutch_auction\n        add_filter( 'woocommerce_is_purchasable', [ __CLASS__, 'allow_dutch_auction_purchase' ], 20, 2 );\n\n        \/\/ Dokan Lite hardcodes product_type='simple' in Products listing; include dutch_auction.\n        add_filter( 'dokan_product_types', [ __CLASS__, 'register_product_type' ] );\n        add_filter( 'dokan_product_listing_arg', [ __CLASS__, 'include_auctions_in_product_listing' ] );\n        add_action( 'init', [ __CLASS__, 'ensure_current_seller_enabled' ], 20 );\n    }\n\n    public static function vendor_product_fields( $post_id = null, $product = null ): void {\n        $product_id = 0;\n        if ( $product instanceof \\WC_Product ) {\n            $product_id = $product->get_id();\n        } elseif ( is_numeric( $post_id ) ) {\n            $product_id = (int) $post_id;\n        }\n\n        $start_price   = $product_id ? get_post_meta( $product_id, '_kloktion_start_price', true ) : '';\n        $reserve_price = $product_id ? get_post_meta( $product_id, '_kloktion_reserve_price', true ) : '';\n        $duration      = $product_id ? get_post_meta( $product_id, '_kloktion_duration', true ) : '';\n        $status        = $product_id ? Auction_Engine::get_status( $product_id ) : '';\n        $terms         = $product_id ? wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] ) : [];\n        $is_auction    = ! $product_id || in_array( 'dutch_auction', $terms, true );\n\n        \/\/ Lock auction fields once the auction has started (any non-empty, non-draft status).\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        $is_locked       = $product_id && in_array( $status, $locked_statuses, true );\n\n        \/\/ Render pending_review notice before the template.\n        if ( 'pending_review' === $status ) {\n            echo '<div style=\"background:#fff8e1;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#7a5800;\">'\n                . '&#9203; ' . esc_html__( 'Your update is pending admin approval. You\\'ll be notified by email once reviewed.', 'kloktion-dutch-auction' )\n                . '<\/div>';\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/product-fields.php';\n    }\n\n    \/**\n     * Intercept vendor product updates for moderation before save_vendor_product runs.\n     * Runs at priority 5, before save_vendor_product at priority 10.\n     *\n     * If moderation is enabled and the auction is in 'stopped' or 'pending_review' state,\n     * capture submitted data, queue it for review, set status to pending_review, and\n     * unhook save_vendor_product so it cannot overwrite the fields.\n     *\/\n    public static function intercept_vendor_update_for_moderation( $product_id, $data ): void {\n        global $wpdb;\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] intercept_vendor_update_for_moderation: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( empty( $settings['moderation_enabled'] ) ) {\n            return;\n        }\n\n        $current_status = get_post_meta( $product_id, '_kloktion_status', true );\n\n        \/\/ Allow new products (empty _kloktion_status) only if this is a Dutch Auction.\n        \/\/ For existing products, only intercept when in 'stopped' or 'pending_review' state.\n        $is_new_product = ( '' === $current_status || false === $current_status );\n        if ( $is_new_product ) {\n            \/\/ Detect if this is a Dutch Auction submission before deciding to intercept.\n            $is_auction_signal = ! empty( $_POST['_kloktion_is_auction'] )\n                || ! empty( $data['_kloktion_is_auction'] )\n                || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n                || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n                || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n            if ( ! $is_auction_signal ) {\n                return; \/\/ Non-auction new product \u2014 skip.\n            }\n        } elseif ( ! in_array( $current_status, [ 'stopped', 'pending_review' ], true ) ) {\n            return; \/\/ Existing product not in a moderation-eligible state.\n        }\n\n        \/\/ Capture only our plugin fields from $data.\n        $kloktion_data = [];\n        foreach ( (array) $data as $key => $value ) {\n            if ( 0 === strpos( $key, '_kloktion_' ) ) {\n                $kloktion_data[ $key ] = $value;\n            }\n        }\n\n        \/\/ Upsert: if a pending row already exists for this product, reset it rather than duplicating.\n        $wpdb->query( $wpdb->prepare(\n            \"INSERT INTO {$wpdb->prefix}kloktion_moderation_queue\n             (product_id, vendor_id, submitted_data, submitted_at, status)\n             VALUES (%d, %d, %s, %s, 'pending')\n             ON DUPLICATE KEY UPDATE\n                vendor_id        = VALUES(vendor_id),\n                submitted_data   = VALUES(submitted_data),\n                submitted_at     = VALUES(submitted_at),\n                status           = 'pending',\n                reviewed_by      = NULL,\n                reviewed_at      = NULL,\n                rejection_reason = NULL\",\n            (int) $product_id,\n            (int) get_current_user_id(),\n            wp_json_encode( $kloktion_data ),\n            current_time( 'mysql' )\n        ) );\n\n        do_action( 'kloktion_moderation_submitted', $product_id, $data );\n\n        \/\/ CRITICAL: Persist auction meta + term BEFORE unhooking save_vendor_product.\n        \/\/ Otherwise Dokan's own save resets product_type to 'simple' and auction data is lost.\n        \/\/ Robust detection: accept checkbox, price field, or product_type signal.\n        $intercept_is_auction = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] )\n            || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n            || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n            || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n        if ( $intercept_is_auction ) {\n            \/\/ Force dutch_auction product type term.\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n            \/\/ Persist auction meta from $data (or $_POST fallback).\n            $meta_map = [\n                '_kloktion_is_auction',\n                '_kloktion_start_price',\n                '_kloktion_reserve_price',\n                '_kloktion_duration',\n                '_kloktion_start_date',\n                '_kloktion_start_time',\n                '_kloktion_start_timestamp',\n                '_kloktion_decay_curve',\n            ];\n            foreach ( $meta_map as $key ) {\n                $value = null;\n                if ( isset( $data[ $key ] ) ) {\n                    $value = $data[ $key ];\n                } elseif ( isset( $_POST[ $key ] ) ) {\n                    $value = wp_unslash( $_POST[ $key ] );\n                }\n                if ( $value !== null && $value !== '' ) {\n                    if ( in_array( $key, [ '_kloktion_start_price', '_kloktion_reserve_price' ], true ) ) {\n                        update_post_meta( $product_id, $key, (float) $value );\n                    } elseif ( in_array( $key, [ '_kloktion_duration', '_kloktion_start_timestamp' ], true ) ) {\n                        update_post_meta( $product_id, $key, absint( $value ) );\n                    } else {\n                        update_post_meta( $product_id, $key, sanitize_text_field( $value ) );\n                    }\n                }\n            }\n\n            \/\/ Ensure _kloktion_is_auction flag persists (used by force_auction_product_type detection).\n            update_post_meta( $product_id, '_kloktion_is_auction', '1' );\n\n            \/\/ Compute end_time if we have start_time + duration.\n            $start_ts = (int) get_post_meta( $product_id, '_kloktion_start_timestamp', true );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $start_ts > 0 && $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_ts + $duration );\n            }\n        }\n\n        \/\/ Mark as pending_review AFTER meta is saved.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Unhook save_vendor_product so it doesn't overwrite the pending_review state.\n        remove_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10 );\n        remove_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10 );\n    }\n\n    public static function save_vendor_product( $product_id, $data ): void {\n        $user_id = get_current_user_id();\n        if ( $user_id && get_transient( 'kloktion_validation_fail_' . $user_id ) ) {\n            delete_transient( 'kloktion_validation_fail_' . $user_id );\n            return;\n        }\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] save_vendor_product: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        \/\/ Robust auction detection: accept any of these signals\n        \/\/ (Dokan may strip or rename fields; presence of price\/type fields is enough).\n        $is_auction_posted = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] );\n\n        $has_auction_price = isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price']\n            || isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'];\n\n        \/\/ Check product_type field in POST (Dokan sends this as 'product_type' or inside $data)\n        $posted_type = $_POST['product_type'] ?? ( $data['product_type'] ?? '' );\n        $type_is_auction = ( 'dutch_auction' === $posted_type );\n\n        \/\/ Also accept if the existing term is already dutch_auction (locked auction re-save)\n        $existing_terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        $has_auction_term = ! is_wp_error( $existing_terms ) && in_array( 'dutch_auction', (array) $existing_terms, true );\n\n        $is_auction = $is_auction_posted || $has_auction_price || $type_is_auction || $has_auction_term;\n\n        if ( ! $is_auction ) {\n            return;\n        }\n\n        wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n        \/\/ If the auction has already started, vendors cannot change core auction fields.\n        $current_status  = get_post_meta( $product_id, '_kloktion_status', true );\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        if ( in_array( $current_status, $locked_statuses, true ) ) {\n            return; \/\/ Auction fields are locked; title\/description\/images handled by Dokan core.\n        }\n\n        $raw_start     = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : ( isset( $data['_kloktion_start_price'] ) ? $data['_kloktion_start_price'] : '' );\n        $start_price   = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_start ) : floatval( $raw_start ) );\n        $no_reserve    = ! empty( $_POST['_kloktion_no_reserve'] ) || ! empty( $data['_kloktion_no_reserve'] );\n        $raw_reserve   = $no_reserve ? '' : ( isset( $_POST['_kloktion_reserve_price'] ) ? wp_unslash( $_POST['_kloktion_reserve_price'] ) : ( isset( $data['_kloktion_reserve_price'] ) ? $data['_kloktion_reserve_price'] : '' ) );\n        $reserve_price = $no_reserve ? 0 : (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_reserve ) : floatval( $raw_reserve ) );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : ( isset( $data['_kloktion_duration'] ) ? absint( $data['_kloktion_duration'] ) : 86400 );\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n\n        update_post_meta( $product_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $product_id, '_kloktion_duration', $duration );\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        if ( ! $status ) {\n            $now = time();\n            update_post_meta( $product_id, '_kloktion_status', 'active' );\n            update_post_meta( $product_id, '_kloktion_start_time', $now );\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n            Logger::log( $product_id, 'active', $start_price, get_current_user_id() );\n        }\n    }\n\n    \/**\n     * Dokan sometimes has seller-role users without the selling flag after manual\n     * account creation\/import. Enable only missing values; explicit \"no\" stays no.\n     *\/\n    public static function ensure_current_seller_enabled(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        $roles = (array) $user->roles;\n        if ( ! $user || ( ! in_array( 'seller', $roles, true ) && ! in_array( 'administrator', $roles, true ) ) ) {\n            return;\n        }\n\n        $selling = get_user_meta( $user_id, 'dokan_enable_selling', true );\n        if ( '' === $selling ) {\n            update_user_meta( $user_id, 'dokan_enable_selling', 'yes' );\n        }\n    }\n\n    public static function add_dashboard_menu( $urls ): array {\n        $urls['kloktion-auctions'] = [\n            'title' => __( 'My Auctions', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-gavel\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-auctions' ),\n            'pos'   => 55,\n        ];\n\n        return $urls;\n    }\n\n    public static function register_query_var( $query_vars ): array {\n        $query_vars[] = 'kloktion-auctions';\n        return $query_vars;\n    }\n\n    public static function load_dashboard_template( $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-auctions'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/my-auctions.php';\n    }\n\n    \/**\n     * Register dutch_auction in Dokan's product type dropdown.\n     *\/\n    public static function register_product_type( array $types ): array {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    \/**\n     * Dokan Lite restricts Products listing to product_type='simple'.\n     * Modify the tax_query to also include 'dutch_auction'.\n     *\/\n    public static function include_auctions_in_product_listing( array $args ): array {\n        if ( empty( $args['tax_query'] ) || ! is_array( $args['tax_query'] ) ) {\n            return $args;\n        }\n\n        foreach ( $args['tax_query'] as &$clause ) {\n            if (\n                is_array( $clause )\n                && isset( $clause['taxonomy'], $clause['field'], $clause['terms'], $clause['operator'] )\n                && 'product_type' === $clause['taxonomy']\n                && 'slug' === $clause['field']\n                && 'IN' === $clause['operator']\n                && is_array( $clause['terms'] )\n                && in_array( 'simple', $clause['terms'], true )\n                && ! in_array( 'dutch_auction', $clause['terms'], true )\n            ) {\n                $clause['terms'][] = 'dutch_auction';\n            }\n        }\n        unset( $clause );\n\n        return $args;\n    }\n\n    public static function allow_dutch_auction_purchase( bool $purchasable, $product ): bool {\n        if ( ! $product instanceof Product_Type ) {\n            return $purchasable;\n        }\n        \/\/ If Dokan already marked it non-purchasable for own-product reason,\n        \/\/ re-check: guests should always be able to purchase, and\n        \/\/ non-author logged-in users should too.\n        if ( ! $purchasable && $product->get_status() === 'publish' ) {\n            $current_user = get_current_user_id();\n            if ( 0 === $current_user ) {\n                return true; \/\/ Guests can always see Add to Cart.\n            }\n            $author = absint( get_post_field( 'post_author', $product->get_id() ) );\n            if ( $author !== $current_user ) {\n                return true;\n            }\n        }\n        return $purchasable;\n    }\n\n    \/**\n     * Add \"Payouts\" menu item to Dokan vendor dashboard navigation.\n     *\/\n    public static function add_payouts_menu( array $urls ): array {\n        $urls['kloktion-payouts'] = [\n            'title' => __( 'Payouts', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-credit-card\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-payouts' ),\n            'pos'   => 60,\n        ];\n\n        return $urls;\n    }\n\n    \/**\n     * Register kloktion-payouts as a Dokan query var.\n     *\/\n    public static function register_payouts_query_var( array $query_vars ): array {\n        $query_vars[] = 'kloktion-payouts';\n        return $query_vars;\n    }\n\n    \/**\n     * Render the Payouts \/ Stripe Connect template in the vendor dashboard.\n     *\n     * Integration note for class-stripe-connect.php:\n     *   ajax_start_onboarding() must compute URLs as:\n     *     $return_url  = dokan_get_navigation_url('kloktion-payouts') . '?stripe_return=1';\n     *     $refresh_url = dokan_get_navigation_url('kloktion-payouts');\n     *   This ensures the vendor lands back on this page after Stripe onboarding.\n     *\/\n    public static function render_payouts_template( array $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-payouts'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        $account_id  = get_user_meta( $vendor_id, '_stripe_connect_account_id', true );\n        $status      = get_user_meta( $vendor_id, '_stripe_connect_status', true );\n        $onboarded_at = get_user_meta( $vendor_id, '_stripe_connect_onboarded_at', true );\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/payouts.php';\n    }\n\n    \/**\n     * Force dutch_auction product type after any save that might reset it to 'simple'.\n     * Runs late (priority 9999\/999) so Dokan's internal save cannot override.\n     * Detects auction products via existing term, POST flag, or auction meta (covers locked auctions too).\n     *\/\n    public static function force_auction_product_type( int $product_id ): void {\n        if ( $product_id <= 0 ) {\n            return;\n        }\n        \/\/ Avoid running during initial WP import\/cron saves\n        if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {\n            return;\n        }\n        \/\/ Skip revisions\n        if ( wp_is_post_revision( $product_id ) ) {\n            return;\n        }\n\n        $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        if ( is_wp_error( $terms ) ) {\n            return;\n        }\n\n        $has_auction_term = in_array( 'dutch_auction', (array) $terms, true );\n        $posted_auction   = ! empty( $_POST['_kloktion_is_auction'] );\n        $has_auction_meta = (bool) get_post_meta( $product_id, '_kloktion_start_price', true )\n                         || '1' === get_post_meta( $product_id, '_kloktion_is_auction', true );\n\n        $is_auction = $has_auction_term || $posted_auction || $has_auction_meta;\n\n        if ( $is_auction ) {\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n            clean_post_cache( $product_id );\n        }\n    }\n\n    \/**\n     * R12: Block vendor save when Dutch Auction start price is missing.\n     * Sets a transient flag so save_vendor_product() can early-return.\n     * On dokan_new_product_added with invalid price, trashes the placeholder post.\n     *\n     * FIX A3: Guard against trashing normal (non-auction) products.\n     * If the vendor saves a regular simple product, _kloktion_start_price is empty\n     * and the old code would wp_trash_post() their legitimate product. The type check\n     * below ensures we only validate auction products.\n     *\/\n    public static function validate_vendor_start_price( $product_id, $data = [] ): void {\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        \/\/ Only validate when this is a Dutch Auction product.\n        $is_auction = false;\n        $product = function_exists( 'wc_get_product' ) ? wc_get_product( $product_id ) : null;\n        if ( $product && method_exists( $product, 'get_type' ) && 'dutch_auction' === $product->get_type() ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && ! empty( $_POST['_kloktion_is_auction'] ) ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $_POST['product_type'] ) && 'dutch_auction' === $_POST['product_type'] ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $data['product_type'] ) && 'dutch_auction' === $data['product_type'] ) {\n            $is_auction = true;\n        }\n        \/\/ Marker meta from product_type registration \u2014 fallback.\n        if ( ! $is_auction ) {\n            $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n            if ( is_array( $terms ) && in_array( 'dutch_auction', $terms, true ) ) {\n                $is_auction = true;\n            }\n        }\n        if ( ! $is_auction ) {\n            return; \/\/ Not an auction product \u2014 never validate or trash.\n        }\n\n        $raw   = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : '';\n        $price = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw ) : floatval( $raw ) );\n        if ( $price <= 0 ) {\n            if ( function_exists( 'wc_add_notice' ) ) {\n                wc_add_notice( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ), 'error' );\n            }\n            set_transient( 'kloktion_validation_fail_' . get_current_user_id(), 1, 60 );\n            \/\/ Trash the placeholder post only on new-product action (no prior status means it was just created).\n            if ( current_action() === 'dokan_new_product_added' && ! get_post_meta( $product_id, '_kloktion_status', true ) ) {\n                $trashed = wp_trash_post( $product_id );\n                if ( ! $trashed && class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'vendor_invalid_product_trash_failed', null, get_current_user_id(), [\n                        'reason' => 'empty_start_price',\n                    ] );\n                }\n            }\n        }\n    }\n\n    \/**\n     * R12: Hide WC Regular\/Sale price + entire Inventory section from Dokan vendor product form.\n     * Dutch Auction lots are unique \u2014 inventory is irrelevant; price is derived from _kloktion_start_price.\n     *\/\n    public static function inject_vendor_dashboard_styles(): void {\n        if ( ! function_exists( 'dokan_is_seller_dashboard' ) || ! dokan_is_seller_dashboard() ) {\n            return;\n        }\n        echo '<style id=\"kloktion-dokan-hide-fields\">\n.dokan-dashboard ._regular_price_field,\n.dokan-dashboard ._sale_price_field,\n.dokan-dashboard .dokan-product-regular-price,\n.dokan-dashboard .dokan-product-less-price,\n.dokan-dashboard .dokan-price-container,\n.dokan-dashboard .dokan-product-inventory,\n.dokan-dashboard .dokan-inventory-container,\n.dokan-dashboard ._manage_stock_field,\n.dokan-dashboard ._stock_field,\n.dokan-dashboard ._stock_status_field,\n.dokan-dashboard ._backorders_field,\n.dokan-dashboard ._sold_individually_field,\n.dokan-dashboard .show_if_simple._sku_field,\n.dokan-dashboard .dokan-form-group.dokan-clearfix.show_if_simple,\n.dokan-dashboard .dokan-product-shipping-container,\n.dokan-dashboard #dokan-product-inventory,\n.dokan-dashboard .dokan-edit-row.content-half-part.dokan-clearfix.dokan-product-inventory { display: none !important; }\n<\/style>';\n    }\n\n    \/**\n     * Add \"Browse Shop\" link to the Dokan vendor sidebar so vendors can exit the dashboard.\n     *\/\n    public static function add_exit_dashboard_nav( array $nav ): array {\n        $nav['kloktion-exit'] = [\n            'title'      => __( 'Browse Shop', 'kloktion-dutch-auction' ),\n            'icon'       => '<i class=\"fas fa-store\"><\/i>',\n            'url'        => site_url( '\/shop\/' ),\n            'pos'        => 200,\n            'permission' => 'dokan_view_overview_menu',\n        ];\n        return $nav;\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:48","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-installer.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Installer {\n\n    const DB_VERSION = 4;\n\n    public static function activate() {\n        self::create_tables();\n        self::set_default_options();\n        self::schedule_cron();\n        \/\/ R12: Turnstile secret placeholder \u2014 admin sets via swissknife after deploy.\n        if ( false === get_option( 'kloktion_turnstile_secret', false ) ) {\n            add_option( 'kloktion_turnstile_secret', '' );\n        }\n        update_option( 'kloktion_db_version', self::DB_VERSION );\n        flush_rewrite_rules();\n    }\n\n    public static function maybe_upgrade(): void {\n        $current = (int) get_option( 'kloktion_db_version', 1 );\n        if ( $current < self::DB_VERSION ) {\n            self::create_tables();\n            update_option( 'kloktion_db_version', self::DB_VERSION );\n        }\n    }\n\n    public static function deactivate() {\n        wp_clear_scheduled_hook( 'kloktion_check_auctions' );\n        wp_clear_scheduled_hook( 'kloktion_check_penalties' );\n        wp_clear_scheduled_hook( 'kloktion_auto_release_escrow' );\n    }\n\n    private static function create_tables() {\n        global $wpdb;\n\n        $charset = $wpdb->get_charset_collate();\n\n        $sql_log = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_auction_log (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            product_id bigint(20) unsigned NOT NULL,\n            event varchar(50) NOT NULL,\n            price_at_event decimal(10,2) DEFAULT NULL,\n            user_id bigint(20) unsigned DEFAULT NULL,\n            details text DEFAULT NULL,\n            created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            KEY product_event (product_id, event),\n            KEY user_id (user_id),\n            KEY created_at (created_at)\n        ) $charset;\";\n\n        $sql_watchlist = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_watchlist (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            user_id bigint(20) unsigned NOT NULL,\n            product_id bigint(20) unsigned NOT NULL,\n            price_alert decimal(10,2) DEFAULT NULL,\n            notified tinyint(1) NOT NULL DEFAULT 0,\n            created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            UNIQUE KEY user_product (user_id, product_id),\n            KEY product_id (product_id)\n        ) $charset;\";\n\n        $sql_consents = \"CREATE TABLE IF NOT EXISTS {$wpdb->prefix}kloktion_card_consents (\n            id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n            user_id bigint(20) unsigned NOT NULL,\n            consent_type varchar(50) NOT NULL,\n            ip_address varchar(45) NOT NULL,\n            accepted_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,\n            PRIMARY KEY (id),\n            KEY user_id (user_id),\n            KEY consent_type (consent_type)\n        ) $charset;\";\n\n        $prefix = $wpdb->prefix;\n        $charset_collate = $charset;\n\n        $sql_moderation_queue = \"CREATE TABLE {$prefix}kloktion_moderation_queue (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          product_id bigint(20) unsigned NOT NULL,\n          vendor_id bigint(20) unsigned NOT NULL,\n          submitted_data longtext NOT NULL,\n          submitted_at datetime NOT NULL,\n          status varchar(20) NOT NULL DEFAULT 'pending',\n          reviewed_by bigint(20) unsigned DEFAULT NULL,\n          reviewed_at datetime DEFAULT NULL,\n          rejection_reason text DEFAULT NULL,\n          PRIMARY KEY (id),\n          UNIQUE KEY product_unique (product_id),\n          KEY vendor_id (vendor_id),\n          KEY status (status)\n        ) {$charset_collate};\";\n\n        $sql_moderation_log = \"CREATE TABLE {$prefix}kloktion_moderation_log (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          queue_id bigint(20) unsigned DEFAULT NULL,\n          product_id bigint(20) unsigned NOT NULL,\n          action varchar(30) NOT NULL,\n          admin_id bigint(20) unsigned NOT NULL,\n          notes text DEFAULT NULL,\n          created_at datetime NOT NULL,\n          PRIMARY KEY (id),\n          KEY product_id (product_id),\n          KEY created_at (created_at)\n        ) {$charset_collate};\";\n\n        $sql_escrow = \"CREATE TABLE {$prefix}kloktion_escrow (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          order_id bigint(20) unsigned NOT NULL,\n          product_id bigint(20) unsigned NOT NULL,\n          vendor_id bigint(20) unsigned NOT NULL,\n          payment_intent_id varchar(100) DEFAULT NULL,\n          charge_id varchar(100) DEFAULT NULL,\n          stripe_account_id varchar(100) NOT NULL,\n          amount decimal(10,2) NOT NULL,\n          platform_fee decimal(10,2) NOT NULL DEFAULT 0,\n          currency varchar(10) NOT NULL DEFAULT 'EUR',\n          status varchar(30) NOT NULL DEFAULT 'pending',\n          transfer_id varchar(100) DEFAULT NULL,\n          release_deadline datetime DEFAULT NULL,\n          delivery_confirmed_at datetime DEFAULT NULL,\n          released_at datetime DEFAULT NULL,\n          created_at datetime NOT NULL,\n          updated_at datetime NOT NULL,\n          PRIMARY KEY (id),\n          UNIQUE KEY order_id (order_id),\n          KEY product_id (product_id),\n          KEY vendor_id (vendor_id),\n          KEY status (status),\n          KEY release_deadline (release_deadline),\n          KEY payment_intent_id (payment_intent_id),\n          KEY charge_id (charge_id)\n        ) {$charset_collate};\";\n\n        $sql_disputes = \"CREATE TABLE {$prefix}kloktion_disputes (\n          id bigint(20) unsigned NOT NULL AUTO_INCREMENT,\n          escrow_id bigint(20) unsigned NOT NULL,\n          order_id bigint(20) unsigned NOT NULL,\n          user_id bigint(20) unsigned NOT NULL,\n          reason text NOT NULL,\n          status varchar(30) NOT NULL DEFAULT 'open',\n          admin_id bigint(20) unsigned DEFAULT NULL,\n          admin_notes text DEFAULT NULL,\n          created_at datetime NOT NULL,\n          resolved_at datetime DEFAULT NULL,\n          PRIMARY KEY (id),\n          KEY escrow_id (escrow_id),\n          KEY order_id (order_id),\n          KEY status (status)\n        ) {$charset_collate};\";\n\n        require_once ABSPATH . 'wp-admin\/includes\/upgrade.php';\n        dbDelta( $sql_log );\n        dbDelta( $sql_watchlist );\n        dbDelta( $sql_consents );\n        dbDelta( $sql_moderation_queue );\n        dbDelta( $sql_moderation_log );\n        dbDelta( $sql_escrow );\n        dbDelta( $sql_disputes );\n    }\n\n    private static function set_default_options() {\n        $defaults = [\n            'default_duration'       => 86400,  \/\/ 24 hours\n            'pause_duration'         => 180,    \/\/ 3 minutes\n            'freeze_timeout'         => 600,    \/\/ 10 minutes\n            'rate_limit'             => 60,     \/\/ requests per minute\n            'poll_interval'          => 2,      \/\/ seconds\n            'processing_timeout'     => 300,    \/\/ 5 minutes\n            'penalty_check_interval' => 86400,  \/\/ daily\n            'commission_percent'     => 10,\n            'dispute_window_days'    => 7,\n            'auto_release_days'      => 10,\n            'escrow_enabled'         => 0,\n            'stripe_platform_secret' => '',\n            'stripe_webhook_secret'  => '',\n            'moderation_enabled'     => 1,\n        ];\n\n        \/\/ Merge: existing values take precedence; new keys from $defaults are added.\n        $existing = get_option( 'kloktion_settings', [] );\n        $merged   = array_merge( $defaults, is_array( $existing ) ? $existing : [] );\n        update_option( 'kloktion_settings', $merged );\n    }\n\n    \/**\n     * Run schema + options migrations when DB_VERSION advances.\n     * Called on plugins_loaded (priority 5) so it runs before the rest of the plugin boots.\n     *\/\n    public static function maybe_migrate(): void {\n        $current_db_version = (int) get_option( 'kloktion_db_version', 0 );\n        if ( $current_db_version >= self::DB_VERSION ) {\n            return;\n        }\n\n        \/\/ activate() is idempotent: dbDelta only adds missing columns\/tables\/keys.\n        self::activate();\n    }\n\n    private static function schedule_cron() {\n        \/\/ Register custom schedule during activation (before Plugin class loads).\n        add_filter( 'cron_schedules', function ( $schedules ) {\n            $schedules['every_minute'] = [\n                'interval' => 60,\n                'display'  => 'Every Minute',\n            ];\n            return $schedules;\n        } );\n\n        if ( ! wp_next_scheduled( 'kloktion_check_auctions' ) ) {\n            wp_schedule_event( time(), 'every_minute', 'kloktion_check_auctions' );\n        }\n\n        if ( ! wp_next_scheduled( 'kloktion_check_penalties' ) ) {\n            wp_schedule_event( time(), 'daily', 'kloktion_check_penalties' );\n        }\n\n        if ( ! wp_next_scheduled( 'kloktion_auto_release_escrow' ) ) {\n            wp_schedule_event( time() + 3600, 'daily', 'kloktion_auto_release_escrow' );\n        }\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:49","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n        add_action( 'wp_enqueue_scripts', [ __CLASS__, 'enqueue_scripts' ] );\n    }\n\n    public static function enqueue_scripts(): void {\n        \\Kloktion\\Turnstile::enqueue_script(); \/\/ R12: bot protection\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        $turnstile_widget = \\Kloktion\\Turnstile::render_widget( 'kloktionTurnstileCallback' ); \/\/ R12: bot protection\n\n        \/\/ FIX J: if Turnstile is enabled, render Buy button disabled until the widget fires its callback.\n        $turnstile_enabled = \\Kloktion\\Turnstile::is_enabled();\n        $buy_extra_attrs   = $turnstile_enabled\n            ? ' disabled aria-busy=\"true\" data-kloktion-await-turnstile=\"1\"'\n            : '';\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        %s\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\"%s hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            $turnstile_widget, \/\/ R12: bot protection widget (already escaped inside render_widget)\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            $buy_extra_attrs, \/\/ FIX J: disabled+aria-busy+data-attr when Turnstile enabled\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        \/\/ R12: Cloudflare Turnstile bot challenge verification.\n        if ( \\Kloktion\\Turnstile::is_enabled() ) {\n            $cf_token = isset( $_POST['cf_turnstile_token'] ) ? sanitize_text_field( wp_unslash( $_POST['cf_turnstile_token'] ) ) : '';\n            if ( empty( $cf_token ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_missing', 'message' => __( 'Bot challenge missing. Please refresh the page.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n            $remote_ip = isset( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) : ( $_SERVER['REMOTE_ADDR'] ?? '' );\n            $check = \\Kloktion\\Turnstile::verify( $cf_token, (string) $remote_ip );\n            if ( empty( $check['success'] ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_failed', 'message' => __( 'Bot challenge failed. Please try again.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:49","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php","content":"<?php\n\/**\n * Cloudflare Turnstile integration \u2014 Buy Now bot protection.\n *\n * Sitekey is public (committed). Secret lives in wp_option `kloktion_turnstile_secret`,\n * set on the live site via swissknife after deploy. If the option is empty,\n * Turnstile verification is skipped (fail-open at the gate, fail-closed once enabled).\n *\n * @package Kloktion\n *\/\n\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Turnstile {\n\n    const SITE_KEY      = '0x4AAAAAADVTH796CcB5MBVX';\n    const SCRIPT_HANDLE = 'cf-turnstile';\n    const VERIFY_URL    = 'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify';\n\n    \/**\n     * Is Turnstile enabled? Requires the secret option to be set on the live site.\n     *\/\n    public static function is_enabled(): bool {\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        return ! empty( $secret ) && ! empty( self::SITE_KEY );\n    }\n\n    \/**\n     * Enqueue the CF challenges API script. Idempotent.\n     *\/\n    public static function enqueue_script(): void {\n        if ( ! self::is_enabled() ) {\n            return;\n        }\n        if ( ! wp_script_is( self::SCRIPT_HANDLE, 'enqueued' ) ) {\n            wp_enqueue_script(\n                self::SCRIPT_HANDLE,\n                'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js',\n                [],\n                null,\n                [ 'in_footer' => true, 'strategy' => 'async' ]\n            );\n        }\n    }\n\n    \/**\n     * Render the Turnstile widget HTML. Output is safe to echo.\n     *\/\n    public static function render_widget( string $callback_name = 'kloktionTurnstileCallback' ): string {\n        if ( ! self::is_enabled() ) {\n            return '';\n        }\n        return sprintf(\n            '<div class=\"cf-turnstile kloktion-turnstile\" data-sitekey=\"%s\" data-callback=\"%s\" data-theme=\"auto\" data-size=\"flexible\"><\/div>',\n            esc_attr( self::SITE_KEY ),\n            esc_attr( $callback_name )\n        );\n    }\n\n    \/**\n     * Verify a Turnstile token server-side.\n     *\n     * @return array{success:bool, error_codes?:array, message?:string}\n     *\/\n    public static function verify( string $token, string $remoteip = '' ): array {\n        if ( ! self::is_enabled() ) {\n            return [ 'success' => true, 'message' => 'turnstile_disabled' ];\n        }\n        if ( empty( $token ) ) {\n            return [ 'success' => false, 'message' => 'missing_token' ];\n        }\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        if ( empty( $secret ) ) {\n            return [ 'success' => true, 'message' => 'no_secret' ];\n        }\n        $body = [\n            'secret'   => $secret,\n            'response' => $token,\n        ];\n        if ( ! empty( $remoteip ) ) {\n            $body['remoteip'] = $remoteip;\n        }\n        $response = wp_remote_post(\n            self::VERIFY_URL,\n            [\n                'timeout'   => 6,\n                'body'      => $body,\n                'sslverify' => true,\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return [ 'success' => false, 'message' => 'request_failed: ' . $response->get_error_message() ];\n        }\n        $code = wp_remote_retrieve_response_code( $response );\n        if ( 200 !== $code ) {\n            return [ 'success' => false, 'message' => 'http_' . $code ];\n        }\n        $data = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! is_array( $data ) ) {\n            return [ 'success' => false, 'message' => 'invalid_response' ];\n        }\n        return [\n            'success'     => ! empty( $data['success'] ),\n            'error_codes' => isset( $data['error-codes'] ) ? (array) $data['error-codes'] : [],\n        ];\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-24 08:19:50","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php","content":"<?php defined( 'ABSPATH' ) || exit; ?>\n<div class=\"dokan-form-group kloktion-dokan-fields\">\n    <h3><?php esc_html_e( 'Dutch Auction Settings', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <input type=\"hidden\" name=\"_kloktion_is_auction\" value=\"1\">\n    <p class=\"dokan-text-left\" style=\"margin:0 0 10px;color:#555;\">\n        <?php esc_html_e( 'Dutch Auction mode is enabled by default and cannot be changed.', 'kloktion-dutch-auction' ); ?>\n    <\/p>\n\n    <?php if ( $is_locked ) : ?>\n        <div style=\"background:#fff3cd;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#856404;\">\n            &#128274; <?php esc_html_e( 'Auction parameters are locked after the auction starts. You can still edit photos, title and description.', 'kloktion-dutch-auction' ); ?>\n        <\/div>\n        <style>\n            .kloktion-dokan-auction-fields input[disabled],\n            .kloktion-dokan-auction-fields select[disabled],\n            .kloktion-dokan-auction-fields textarea[disabled] {\n                background: #f0f0f0 !important;\n                color: #999 !important;\n                cursor: not-allowed !important;\n                opacity: 0.7 !important;\n                border-color: #ddd !important;\n            }\n        <\/style>\n    <?php endif; ?>\n\n    <div class=\"kloktion-dokan-auction-fields\">\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_start_price\"><?php esc_html_e( 'Start Price', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_start_price\" id=\"_kloktion_start_price\"\n                   value=\"<?php echo esc_attr( $start_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" required <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <?php $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0; ?>\n        <div class=\"dokan-form-group\">\n            <label>\n                <input type=\"checkbox\" name=\"_kloktion_no_reserve\" value=\"1\" <?php checked( $no_reserve ); ?> id=\"_kloktion_no_reserve_dokan\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <?php esc_html_e( 'No Reserve (price can drop to zero)', 'kloktion-dutch-auction' ); ?>\n            <\/label>\n        <\/div>\n        <div class=\"dokan-form-group kloktion-dokan-reserve-field\" style=\"<?php echo $no_reserve ? 'display:none;' : ''; ?>\">\n            <label for=\"_kloktion_reserve_price\"><?php esc_html_e( 'Reserve Price (minimum)', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_reserve_price\" id=\"_kloktion_reserve_price\"\n                   value=\"<?php echo esc_attr( $no_reserve ? '' : $reserve_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_duration\"><?php esc_html_e( 'Auction Duration', 'kloktion-dutch-auction' ); ?><\/label>\n            <select name=\"_kloktion_duration\" id=\"_kloktion_duration\" class=\"dokan-form-control\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <option value=\"259200\" <?php selected( $duration, 259200 ); ?>><?php esc_html_e( '3 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"432000\" <?php selected( $duration, 432000 ); ?>><?php esc_html_e( '5 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"604800\" <?php selected( $duration, 604800 ); ?>><?php esc_html_e( '7 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"864000\" <?php selected( $duration, 864000 ); ?>><?php esc_html_e( '10 days', 'kloktion-dutch-auction' ); ?><\/option>\n            <\/select>\n        <\/div>\n\n        <?php if ( $status ) : ?>\n        <div class=\"dokan-form-group\">\n            <label><?php esc_html_e( 'Current Status', 'kloktion-dutch-auction' ); ?><\/label>\n            <span class=\"dokan-label\"><?php echo esc_html( strtoupper( $status ) ); ?><\/span>\n        <\/div>\n        <?php endif; ?>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    var nrCb = document.getElementById('_kloktion_no_reserve_dokan');\n    var rField = document.querySelector('.kloktion-dokan-reserve-field');\n    if (nrCb && rField && !nrCb.disabled) {\n        nrCb.addEventListener('change', function() {\n            rField.style.display = this.checked ? 'none' : '';\n            if (this.checked) document.getElementById('_kloktion_reserve_price').value = '';\n        });\n    }\n\n    var typeField = document.querySelector('[name=\"product_type\"]');\n    if (typeField) {\n        typeField.value = 'dutch_auction';\n        typeField.disabled = true;\n\n        var hiddenType = document.createElement('input');\n        hiddenType.type = 'hidden';\n        hiddenType.name = 'product_type';\n        hiddenType.value = 'dutch_auction';\n        typeField.parentNode.appendChild(hiddenType);\n\n        var wrapper = typeField.closest('.dokan-form-group') || typeField.closest('p');\n        if (wrapper) wrapper.style.display = 'none';\n    }\n})();\n<\/script>\n\n<style>.kloktion-field-error { border-color: #dc3545 !important; }<\/style>\n<script>\n(function() {\n    document.addEventListener( 'DOMContentLoaded', function() {\n        var priceField = document.getElementById( '_kloktion_start_price' );\n        if ( ! priceField ) { return; }\n\n        \/\/ B5: clear error only when value becomes valid (not on every keystroke).\n        priceField.addEventListener( 'input', function() {\n            if ( parseFloat( priceField.value ) > 0 ) {\n                priceField.classList.remove( 'kloktion-field-error' );\n                var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                if ( errDiv ) { errDiv.remove(); }\n            }\n        } );\n\n        \/\/ B5: also handle paste \u2014 value isn't yet updated when paste fires, use setTimeout 0.\n        priceField.addEventListener( 'paste', function() {\n            setTimeout( function() {\n                if ( parseFloat( priceField.value ) > 0 ) {\n                    priceField.classList.remove( 'kloktion-field-error' );\n                    var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                    if ( errDiv ) { errDiv.remove(); }\n                }\n            }, 0 );\n        } );\n\n        \/\/ B4: shared intercept function used by both click delegation and form-submit fallback.\n        function intercept( e ) {\n            var value = parseFloat( priceField.value );\n            if ( ! value || value <= 0 ) {\n                e.preventDefault();\n                e.stopPropagation();\n                e.stopImmediatePropagation();\n                priceField.classList.add( 'kloktion-field-error' );\n                priceField.focus();\n                if ( ! document.getElementById( 'kloktion-start-price-error' ) ) {\n                    var err = document.createElement( 'div' );\n                    err.id = 'kloktion-start-price-error';\n                    err.style.color = '#dc3545';\n                    err.style.marginTop = '6px';\n                    err.style.fontSize = '13px';\n                    err.textContent = <?php echo wp_json_encode( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ) ); ?>;\n                    priceField.parentNode.appendChild( err );\n                }\n                return false;\n            }\n        }\n\n        \/\/ B4: Dokan intercepts Save via XHR without triggering form.submit().\n        \/\/ Bind to save button click with capture so we run before Dokan's handler.\n        document.addEventListener( 'click', function( e ) {\n            var t = e.target;\n            if ( ! t ) { return; }\n            var el = t.closest ? t.closest( 'button, input[type=submit]' ) : null;\n            if ( ! el ) { return; }\n            var isDokanSave = el.matches(\n                '.dokan-btn-theme, [name=\"dokan_update_product\"], [name=\"add_product\"], #publish, .dokan-edit-product-form button[type=submit]'\n            );\n            if ( isDokanSave ) {\n                intercept( e );\n            }\n        }, true );\n\n        \/\/ B4: also keep form-submit fallback for vanilla HTML5 submits.\n        var form = document.querySelector( 'form.dokan-product-edit-form, form#dokan-add-product-form, form.dokan-new-product-form' );\n        if ( form ) {\n            form.addEventListener( 'submit', intercept, true );\n        }\n    } );\n})();\n<\/script>\n"},"result":null}
{"timestamp":"2026-05-24 08:20:13","ip":"2a01:4f8:110:1444::2","action":"option_update","params":{"option":"kloktion_turnstile_secret","value":"0x4AAAAAADVTH2eSSPKw7mrjq0biqTTg-7w","autoload":false},"result":null}
{"timestamp":"2026-05-24 08:20:13","ip":"2a01:4f8:110:1444::2","action":"option_update","params":{"option":"kloktion_turnstile_secret","value":"0x4AAAAAADVTH2eSSPKw7mrjq0biqTTg-7w","autoload":false},"result":"fatal: WPRC_Legacy::option_update(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-24 08:20:13","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"kloktion_turnstile_secret"},"result":null}
{"timestamp":"2026-05-24 08:20:13","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"kloktion_turnstile_secret"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-24 08:20:14","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-24 08:20:27","ip":"2a01:4f8:110:1444::2","action":"option_update","params":["kloktion_turnstile_secret","0x4AAAAAADVTH2eSSPKw7mrjq0biqTTg-7w"],"result":null}
{"timestamp":"2026-05-24 08:20:28","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["kloktion_turnstile_secret"],"result":null}
{"timestamp":"2026-05-24 08:20:28","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-24 08:20:39","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-24 08:20:39","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log","tail":50},"result":null}
{"timestamp":"2026-05-24 08:21:10","ip":"2a01:4f8:110:1444::2","action":"option_get","params":["kloktion_turnstile_secret"],"result":null}
{"timestamp":"2026-05-24 08:21:11","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php"},"result":null}
{"timestamp":"2026-05-24 08:21:40","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php"},"result":null}
{"timestamp":"2026-05-24 08:21:40","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php"},"result":null}
{"timestamp":"2026-05-24 08:21:41","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php"},"result":null}
{"timestamp":"2026-05-24 08:21:41","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php"},"result":null}
{"timestamp":"2026-05-24 08:22:13","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php"},"result":null}
{"timestamp":"2026-05-24 08:22:14","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php"},"result":null}
{"timestamp":"2026-05-24 08:22:14","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT p.ID, p.post_title FROM mod494_posts p JOIN mod494_postmeta pm ON p.ID=pm.post_id WHERE p.post_type=\"product\" AND p.post_status=\"publish\" AND pm.meta_key=\"_kloktion_status\" AND pm.meta_value IN (\"active\",\"paused\") LIMIT 3"],"result":null}
{"timestamp":"2026-05-24 08:22:23","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT p.ID, p.post_title FROM mod494_posts p JOIN mod494_postmeta pm ON p.ID=pm.post_id WHERE p.post_type=\"product\" AND p.post_status=\"publish\" AND pm.meta_key=\"_kloktion_status\" AND pm.meta_value IN (\"active\",\"paused\") LIMIT 3"],"result":null}
{"timestamp":"2026-05-24 08:22:34","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT guid FROM mod494_posts WHERE ID=190"],"result":null}
{"timestamp":"2026-05-24 08:23:18","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-24 08:23:32","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-24 08:23:52","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_ipdiag.php","content":"<?php echo json_encode($_SERVER, JSON_PRETTY_PRINT); exit;"},"result":null}
{"timestamp":"2026-05-24 08:23:53","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_ipdiag.php","content":"<?php exit;"},"result":null}
{"timestamp":"2026-05-24 10:48:53","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php"},"result":null}
{"timestamp":"2026-05-24 10:49:04","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-coming-soon.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Coming Soon\n * Description: Shows a \"Launching soon\" holding page to non-authorized visitors.\n * Version: 1.2.0\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\nadd_action( 'template_redirect', 'kloktion_coming_soon_gate', 1 );\n\nfunction kloktion_coming_soon_gate() {\n    \/\/ Never block the WP login\/admin area.\n    if ( is_admin() || ( defined( 'DOING_AJAX' ) && DOING_AJAX ) ) {\n        return;\n    }\n\n    \/\/ Never block cron or REST heartbeat.\n    if ( defined( 'DOING_CRON' ) && DOING_CRON ) {\n        return;\n    }\n\n    \/\/ Check if current user is allowed through.\n    if ( kloktion_coming_soon_is_allowed() ) {\n        return;\n    }\n\n    \/\/ Show coming-soon page and stop.\n    status_header( 503 );\n    nocache_headers();\n    header( 'Retry-After: 86400' );\n\n    echo '<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n<meta charset=\"UTF-8\">\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n<title>Launching soon - Kloktion<\/title>\n<style>\n  body { margin: 0; font-family: sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; background: #f4f4f4; }\n  .box { text-align: center; padding: 3rem 2rem; }\n  h1 { font-size: 2rem; color: #5d2da3; margin-bottom: 1rem; }\n  p { color: #555; font-size: 1.1rem; }\n<\/style>\n<\/head>\n<body>\n  <div class=\"box\">\n    <h1>Launching soon<\/h1>\n    <p>We are putting the finishing touches on Kloktion. Check back shortly.<\/p>\n  <\/div>\n<\/body>\n<\/html>';\n    exit;\n}\n\n\/**\n * Returns true when the current request \/ user should bypass the coming-soon gate.\n *\n * Bypass conditions (in order of evaluation):\n *  1. User is an admin (has manage_options capability).\n *  2. User is an editor or author (has edit_posts capability) - legacy bypass.\n *  3. User has the Dokan \"seller\" role.\n *  4. Logged-in user is accessing the Dokan vendor dashboard (\/dashboard\/*) -\n *     safety net for sellers whose role flag has not been fully set yet.\n *  5. (Optional) Dokan customers accessing buyer flow - uncomment if needed:\n *     \/\/ if ( is_user_logged_in() && current_user_can( 'read' ) ) { return true; }\n *\/\nfunction kloktion_coming_soon_is_allowed() {\n\t\/\/ 0. Whitelisted IPs (Hetzner WG public IP, internal team). Bypass for any visitor on these IPs even if logged out.\n\t$whitelisted_ips = array(\n\t\t'78.46.49.27', \/\/ Hetzner public IPv4 - team wireguard VPN exit\n\t\t'2a01:4f8:110:1444::2', \/\/ Hetzner public IPv6 - test agents outbound\n\t);\n\t$client_ip = '';\n\tif ( ! empty( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) {\n\t\t$client_ip = trim( $_SERVER['HTTP_CF_CONNECTING_IP'] );\n\t} elseif ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {\n\t\t$parts = explode( ',', $_SERVER['HTTP_X_FORWARDED_FOR'] );\n\t\t$client_ip = trim( $parts[0] );\n\t} elseif ( ! empty( $_SERVER['REMOTE_ADDR'] ) ) {\n\t\t$client_ip = trim( $_SERVER['REMOTE_ADDR'] );\n\t}\n\tif ( $client_ip && in_array( $client_ip, $whitelisted_ips, true ) ) {\n\t\treturn true;\n\t}\n\n\t\/\/ 1. Admins.\n    if ( current_user_can( 'manage_options' ) ) {\n        return true;\n    }\n\n    \/\/ 2. Editors \/ authors (edit_posts) - original bypass kept for back-compat.\n    if ( current_user_can( 'edit_posts' ) ) {\n        return true;\n    }\n\n    \/\/ 3. Dokan vendors: role \"seller\".\n    if ( is_user_logged_in() ) {\n        $user = wp_get_current_user();\n        if ( in_array( 'seller', (array) $user->roles, true ) ) {\n            return true;\n        }\n    }\n\n    \/\/ 4. Logged-in user on the Dokan vendor dashboard path (\/dashboard\/*).\n    if ( is_user_logged_in() ) {\n        $request_uri = isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '';\n        \/\/ Strip query string and leading slash for comparison.\n        $path = ltrim( strtok( $request_uri, '?' ), '\/' );\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n        \/\/ Also handle when WordPress is installed in a subdirectory.\n        $home_path = ltrim( parse_url( home_url(), PHP_URL_PATH ), '\/' );\n        if ( $home_path ) {\n            $path = ltrim( substr( $path, strlen( $home_path ) ), '\/' );\n        }\n        if ( strncmp( $path, 'dashboard\/', 10 ) === 0 || $path === 'dashboard' ) {\n            return true;\n        }\n    }\n\n    return false;\n}\n\n"},"result":null}
{"timestamp":"2026-05-24 10:50:37","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php"},"result":null}
{"timestamp":"2026-05-24 10:50:39","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-checkout-handler.php"},"result":null}
{"timestamp":"2026-05-24 10:50:40","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php"},"result":null}
{"timestamp":"2026-05-24 10:50:42","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php"},"result":null}
{"timestamp":"2026-05-24 10:50:44","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php"},"result":null}
{"timestamp":"2026-05-24 10:50:45","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-auction-engine.php"},"result":null}
{"timestamp":"2026-05-24 10:50:47","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js"},"result":null}
{"timestamp":"2026-05-24 10:50:48","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css"},"result":null}
{"timestamp":"2026-05-24 10:50:50","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php"},"result":null}
{"timestamp":"2026-05-24 10:50:51","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php"},"result":null}
{"timestamp":"2026-05-24 10:50:56","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"kloktion_turnstile_secret"},"result":null}
{"timestamp":"2026-05-24 10:50:56","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option":"kloktion_turnstile_secret"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-24 10:50:58","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-24 10:51:07","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option_name":"kloktion_turnstile_secret"},"result":null}
{"timestamp":"2026-05-24 10:51:07","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"option_name":"kloktion_turnstile_secret"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-24 10:51:10","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-24 10:51:21","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM wp_options WHERE option_name = \"kloktion_turnstile_secret\" LIMIT 1"},"result":null}
{"timestamp":"2026-05-24 10:51:21","ip":"2a01:4f8:110:1444::2","action":"db_query","params":{"query":"SELECT option_value FROM wp_options WHERE option_name = \"kloktion_turnstile_secret\" LIMIT 1"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-24 10:52:34","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"name":"kloktion_turnstile_secret"},"result":null}
{"timestamp":"2026-05-24 10:52:34","ip":"2a01:4f8:110:1444::2","action":"option_get","params":{"name":"kloktion_turnstile_secret"},"result":"fatal: WPRC_Legacy::option_get(): Argument #1 ($name) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-05-24 10:58:43","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Admin {\n\n    public static function init_product_hooks(): void {\n        add_filter( 'woocommerce_product_data_tabs', [ __CLASS__, 'product_data_tab' ] );\n        add_action( 'woocommerce_product_data_panels', [ __CLASS__, 'product_data_panel' ] );\n        add_action( 'woocommerce_process_product_meta', [ __CLASS__, 'save_product_meta' ] );\n        add_action( 'woocommerce_product_options_general_product_data', [ __CLASS__, 'show_general_tab_for_type' ] );\n        add_action( 'wp_ajax_kloktion_justice_button', [ __CLASS__, 'ajax_justice_button' ] );\n        add_action( 'wp_ajax_kloktion_justice_delete', [ __CLASS__, 'ajax_justice_delete' ] );\n        add_action( 'wp_ajax_kloktion_moderation_approve', [ __CLASS__, 'ajax_moderation_approve' ] );\n        add_action( 'wp_ajax_kloktion_moderation_reject', [ __CLASS__, 'ajax_moderation_reject' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_release', [ __CLASS__, 'ajax_dispute_resolve_release' ] );\n        add_action( 'wp_ajax_kloktion_dispute_resolve_refund', [ __CLASS__, 'ajax_dispute_resolve_refund' ] );\n        add_action( 'wp_ajax_kloktion_release_pending', [ __CLASS__, 'ajax_release_pending' ] );\n\n        add_action( 'add_meta_boxes', [ __CLASS__, 'add_log_metabox' ] );\n    }\n\n    public static function register_menu(): void {\n        add_menu_page(\n            __( 'Kloktion Auctions', 'kloktion-dutch-auction' ),\n            __( 'Kloktion', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ],\n            'dashicons-chart-area',\n            56\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            __( 'Auctions', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-auctions',\n            [ __CLASS__, 'render_dashboard' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            __( 'Settings', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-settings',\n            [ __CLASS__, 'render_settings' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            __( 'Moderation Queue', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-moderation',\n            [ __CLASS__, 'render_moderation_queue' ]\n        );\n\n        add_submenu_page(\n            'kloktion-auctions',\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            __( 'Disputes', 'kloktion-dutch-auction' ),\n            'manage_woocommerce',\n            'kloktion-disputes',\n            [ __CLASS__, 'render_disputes_page' ]\n        );\n    }\n\n    public static function product_data_tab( $tabs ) {\n        $tabs['kloktion_auction'] = [\n            'label'    => __( 'Dutch Auction', 'kloktion-dutch-auction' ),\n            'target'   => 'kloktion_auction_data',\n            'class'    => [ 'show_if_dutch_auction' ],\n            'priority' => 11,\n        ];\n        return $tabs;\n    }\n\n    public static function show_general_tab_for_type(): void {\n        \/\/ Add classes so WC shows General tab for dutch_auction type.\n        \/\/ Pricing field toggle is handled in kloktion-admin.js for reliability.\n        echo '<script>jQuery(function($){\n            $(\".product_data_tabs .general_tab\").addClass(\"show_if_dutch_auction\");\n            $(\"#general_product_data\").addClass(\"show_if_dutch_auction\");\n        });<\/script>';\n    }\n\n    public static function product_data_panel(): void {\n        global $post;\n        $product_id = $post->ID;\n\n        $start_price   = get_post_meta( $product_id, '_kloktion_start_price', true );\n        $reserve_price = get_post_meta( $product_id, '_kloktion_reserve_price', true );\n        $duration      = get_post_meta( $product_id, '_kloktion_duration', true );\n        $start_time    = get_post_meta( $product_id, '_kloktion_start_time', true );\n        $status        = Auction_Engine::get_status( $product_id );\n        $start_now     = empty( $start_time );\n\n        echo '<div id=\"kloktion_auction_data\" class=\"panel woocommerce_options_panel hidden\">';\n\n        wp_nonce_field( 'kloktion_product_save', 'kloktion_product_nonce' );\n\n        $status_labels = [\n            'pending_review' => __( 'Awaiting Review', 'kloktion-dutch-auction' ),\n            'scheduled'      => '\ud83d\udfe1 Scheduled',\n            'active'         => '\ud83d\udfe2 Active',\n            'paused'         => '\ud83d\udd34 Last Chance',\n            'processing'     => '\ud83d\udd35 Processing',\n            'sold'           => '\u2705 Sold',\n            'expired'        => '\u26ab Expired',\n            'stopped'        => '\ud83d\uded1 Stopped',\n        ];\n        echo '<div class=\"options_group\">';\n        echo '<p class=\"form-field\"><label>' . esc_html__( 'Status', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<span class=\"kloktion-status-badge\">' . ( $status_labels[ $status ] ?? esc_html( $status ) ) . '<\/span>';\n\n        if ( in_array( $status, [ 'active', 'paused' ], true ) ) {\n            $current_price = Auction_Engine::calculate_price( $product_id );\n            $time_left     = Auction_Engine::get_time_remaining( $product_id );\n            echo ' | ' . esc_html__( 'Current Price:', 'kloktion-dutch-auction' ) . ' <strong>' . wp_kses_post( wc_price( $current_price ) ) . '<\/strong>';\n            echo ' | ' . esc_html__( 'Time Left:', 'kloktion-dutch-auction' ) . ' <strong>' . esc_html( gmdate( 'H:i:s', $time_left ) ) . '<\/strong>';\n        }\n        echo '<\/p><\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_start_price',\n            'label'             => sprintf( __( 'Start Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $start_price,\n            'desc_tip'          => true,\n            'description'       => __( 'The highest price the auction starts at.', 'kloktion-dutch-auction' ),\n        ] );\n\n        $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0;\n\n        woocommerce_wp_checkbox( [\n            'id'          => '_kloktion_no_reserve',\n            'label'       => __( 'No Reserve', 'kloktion-dutch-auction' ),\n            'value'       => $no_reserve ? 'yes' : 'no',\n            'description' => __( 'Allow price to drop to zero. No minimum price.', 'kloktion-dutch-auction' ),\n        ] );\n\n        woocommerce_wp_text_input( [\n            'id'                => '_kloktion_reserve_price',\n            'label'             => sprintf( __( 'Reserve Price (%s)', 'kloktion-dutch-auction' ), get_woocommerce_currency_symbol() ),\n            'type'              => 'number',\n            'custom_attributes' => [ 'step' => '0.01', 'min' => '0.01' ],\n            'value'             => $no_reserve ? '' : $reserve_price,\n            'desc_tip'          => true,\n            'description'       => __( 'Minimum price the auction will drop to. Must be less than start price.', 'kloktion-dutch-auction' ),\n            'wrapper_class'     => $no_reserve ? 'kloktion-reserve-field hidden' : 'kloktion-reserve-field',\n        ] );\n        echo '<\/div>';\n        echo '<script>jQuery(function($){var cb=$(\"#_kloktion_no_reserve\"),f=$(\".kloktion-reserve-field\");cb.on(\"change\",function(){f.toggle(!this.checked);if(this.checked)$(\"#_kloktion_reserve_price\").val(\"\")});});<\/script>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_select( [\n            'id'      => '_kloktion_duration',\n            'label'   => __( 'Listing Duration', 'kloktion-dutch-auction' ),\n            'options' => [\n                ''      => __( 'Select duration...', 'kloktion-dutch-auction' ),\n                '259200'=> __( '3 days', 'kloktion-dutch-auction' ),\n                '432000'=> __( '5 days', 'kloktion-dutch-auction' ),\n                '604800'=> __( '7 days', 'kloktion-dutch-auction' ),\n                '864000'=> __( '10 days', 'kloktion-dutch-auction' ),\n            ],\n            'value'   => $duration,\n        ] );\n        echo '<\/div>';\n\n        echo '<div class=\"options_group\">';\n        woocommerce_wp_checkbox( [\n            'id'    => '_kloktion_start_now',\n            'label' => __( 'Start immediately', 'kloktion-dutch-auction' ),\n            'value' => $start_now ? 'yes' : 'no',\n        ] );\n\n        $schedule_date = $start_time ? gmdate( 'Y-m-d', (int) $start_time ) : '';\n        $schedule_time = $start_time ? gmdate( 'H:i', (int) $start_time ) : '';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_date\">' . esc_html__( 'Start Date', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"date\" id=\"_kloktion_schedule_date\" name=\"_kloktion_schedule_date\" value=\"' . esc_attr( $schedule_date ) . '\" style=\"width:auto;\" \/>';\n        echo '<\/p>';\n\n        echo '<p class=\"form-field _kloktion_schedule_field\">';\n        echo '<label for=\"_kloktion_schedule_time\">' . esc_html__( 'Start Time', 'kloktion-dutch-auction' ) . '<\/label>';\n        echo '<input type=\"time\" id=\"_kloktion_schedule_time\" name=\"_kloktion_schedule_time\" value=\"' . esc_attr( $schedule_time ) . '\" style=\"width:auto;\" \/>';\n        echo '<span class=\"description\">' . esc_html__( 'UTC time. Leave empty and check \"Start immediately\" to start on save.', 'kloktion-dutch-auction' ) . '<\/span>';\n        echo '<\/p>';\n        echo '<\/div>';\n\n        if ( current_user_can( 'manage_woocommerce' ) && in_array( $status, [ 'active', 'paused', 'scheduled' ], true ) ) {\n            echo '<div class=\"options_group kloktion-justice-section\">';\n            echo '<h4 style=\"padding:0 12px;color:#c62828;\">' . esc_html__( 'Justice Button', 'kloktion-dutch-auction' ) . '<\/h4>';\n            echo '<p class=\"form-field\">';\n            echo '<label for=\"_kloktion_stop_reason\">' . esc_html__( 'Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<textarea id=\"_kloktion_stop_reason\" name=\"_kloktion_stop_reason\" rows=\"2\" placeholder=\"' . esc_attr__( 'Enter reason for stopping\/deleting this auction...', 'kloktion-dutch-auction' ) . '\"><\/textarea>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>' . esc_html__( 'Notify Seller', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<input type=\"checkbox\" id=\"_kloktion_notify_seller\" name=\"_kloktion_notify_seller\" value=\"yes\" checked=\"checked\" \/> ';\n            echo '<span class=\"description\">' . esc_html__( 'Send email notification to the seller with the reason.', 'kloktion-dutch-auction' ) . '<\/span>';\n            echo '<\/p>';\n            echo '<p class=\"form-field\">';\n            echo '<label>&nbsp;<\/label>';\n            echo '<button type=\"button\" id=\"kloktion-justice-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"stop\">';\n            echo esc_html__( 'Stop This Auction', 'kloktion-dutch-auction' );\n            echo '<\/button> &nbsp;';\n            echo '<button type=\"button\" id=\"kloktion-justice-delete-btn\" class=\"button button-danger\" data-product-id=\"' . esc_attr( $product_id ) . '\" data-action=\"delete\" style=\"background:#c62828;border-color:#c62828;color:#fff;\">';\n            echo esc_html__( 'Delete Permanently', 'kloktion-dutch-auction' );\n            echo '<\/button>';\n            echo '<\/p>';\n            echo '<\/div>';\n        }\n\n        if ( current_user_can( 'manage_woocommerce' ) && 'pending_purchase' === $status ) {\n            $pending_order_id = (int) get_post_meta( $post->ID, '_kloktion_pending_order', true );\n            $deadline         = (int) get_post_meta( $post->ID, '_kloktion_payment_deadline', true );\n            ?>\n            <div class=\"options_group kloktion-pending-purchase-actions\" style=\"margin-top:12px;padding:12px;background:#fff7e6;border:1px solid #ffb84d;border-radius:4px;\">\n                <p style=\"margin:0 0 8px;\"><strong><?php esc_html_e( 'Pending Purchase', 'kloktion-dutch-auction' ); ?><\/strong><\/p>\n                <?php if ( $pending_order_id ) : ?>\n                    <p style=\"margin:0 0 4px;font-size:13px;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: order edit link *\/\n                            esc_html__( 'Order: %s', 'kloktion-dutch-auction' ),\n                            '<a href=\"' . esc_url( get_edit_post_link( $pending_order_id ) ) . '\">#' . esc_html( $pending_order_id ) . '<\/a>'\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <?php if ( $deadline ) : ?>\n                    <p style=\"margin:0 0 8px;font-size:13px;color:#666;\">\n                        <?php\n                        printf(\n                            \/* translators: %s: human-readable deadline *\/\n                            esc_html__( 'Payment deadline: %s', 'kloktion-dutch-auction' ),\n                            esc_html( gmdate( 'Y-m-d H:i', $deadline ) . ' UTC' )\n                        );\n                        ?>\n                    <\/p>\n                <?php endif; ?>\n                <p class=\"form-field\">\n                    <label for=\"kloktion-release-reason\" style=\"font-size:13px;\"><?php esc_html_e( 'Reason', 'kloktion-dutch-auction' ); ?>:<\/label>\n                    <select id=\"kloktion-release-reason\" class=\"regular-text\" style=\"width:100%;\">\n                        <option value=\"penalty_unpaid\"><?php esc_html_e( 'Penalty unpaid (invalid card)', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"seller_request\"><?php esc_html_e( 'Seller request', 'kloktion-dutch-auction' ); ?><\/option>\n                        <option value=\"admin_decision\"><?php esc_html_e( 'Admin decision', 'kloktion-dutch-auction' ); ?><\/option>\n                    <\/select>\n                <\/p>\n                <p class=\"form-field\">\n                    <label>&nbsp;<\/label>\n                    <button type=\"button\" class=\"button button-primary kloktion-release-pending-btn\"\n                        data-product-id=\"<?php echo (int) $post->ID; ?>\"\n                        data-nonce=\"<?php echo esc_attr( wp_create_nonce( 'kloktion_release_pending_' . $post->ID ) ); ?>\">\n                        <?php esc_html_e( 'Put back on sale', 'kloktion-dutch-auction' ); ?>\n                    <\/button>\n                <\/p>\n                <p style=\"margin:6px 0 0;font-size:13px;color:#666;\">\n                    <?php esc_html_e( 'Cancels the pending order, clears the reservation, and restarts the auction from the original start price.', 'kloktion-dutch-auction' ); ?>\n                <\/p>\n            <\/div>\n            <script>\n            (function($){\n                $(document).on('click', '.kloktion-release-pending-btn', function(e){\n                    e.preventDefault();\n                    var $btn = $(this);\n                    var reason = $('#kloktion-release-reason').val();\n                    if ( ! confirm(<?php echo wp_json_encode( __( 'Cancel the pending order and put this lot back on sale? This cannot be undone.', 'kloktion-dutch-auction' ) ); ?>) ) { return; }\n                    var $errDiv = $btn.closest('.form-field').find('.kloktion-release-error');\n                    if ( ! $errDiv.length ) {\n                        $errDiv = $('<p class=\"kloktion-release-error\" style=\"color:#c62828;margin:6px 0 0;font-size:13px;\"><\/p>').insertAfter($btn.closest('.form-field'));\n                    }\n                    $errDiv.text('').hide();\n                    $btn.prop('disabled', true).attr('aria-busy', 'true').text(<?php echo wp_json_encode( __( 'Processing...', 'kloktion-dutch-auction' ) ); ?>);\n                    $.post(ajaxurl, {\n                        action: 'kloktion_release_pending',\n                        product_id: $btn.data('product-id'),\n                        nonce: $btn.data('nonce'),\n                        reason: reason\n                    }).done(function(resp){\n                        if ( resp && resp.success ) {\n                            $btn.text(<?php echo wp_json_encode( __( 'Released. Reloading\u2026', 'kloktion-dutch-auction' ) ); ?>);\n                            setTimeout(function(){ location.reload(); }, 600);\n                        } else {\n                            var msg = (resp && resp.data && resp.data.message) || <?php echo wp_json_encode( __( 'An error occurred. Please try again.', 'kloktion-dutch-auction' ) ); ?>;\n                            $errDiv.text(msg).show();\n                            $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                        }\n                    }).fail(function(){\n                        $errDiv.text(<?php echo wp_json_encode( __( 'Network error. Please try again.', 'kloktion-dutch-auction' ) ); ?>).show();\n                        $btn.prop('disabled', false).removeAttr('aria-busy').text(<?php echo wp_json_encode( __( 'Put back on sale', 'kloktion-dutch-auction' ) ); ?>);\n                    }).always(function(){\n                        $btn.removeAttr('aria-busy');\n                    });\n                });\n            })(jQuery);\n            <\/script>\n            <?php\n        }\n\n        if ( 'stopped' === $status ) {\n            $reason = get_post_meta( $product_id, '_kloktion_stop_reason', true );\n            $by     = get_post_meta( $product_id, '_kloktion_stop_by', true );\n            echo '<div class=\"options_group\">';\n            echo '<p class=\"form-field\"><label>' . esc_html__( 'Stop Reason', 'kloktion-dutch-auction' ) . '<\/label>';\n            echo '<span>' . esc_html( $reason ) . '<\/span><\/p>';\n            if ( $by ) {\n                $user = get_user_by( 'id', $by );\n                echo '<p class=\"form-field\"><label>' . esc_html__( 'Stopped By', 'kloktion-dutch-auction' ) . '<\/label>';\n                echo '<span>' . esc_html( $user ? $user->display_name : '#' . $by ) . '<\/span><\/p>';\n            }\n            echo '<\/div>';\n        }\n\n        echo '<\/div>';\n    }\n\n    public static function save_product_meta( int $post_id ): void {\n        if ( ! isset( $_POST['kloktion_product_nonce'] ) || ! wp_verify_nonce( $_POST['kloktion_product_nonce'], 'kloktion_product_save' ) ) {\n            return;\n        }\n\n        if ( ! current_user_can( 'edit_product', $post_id ) ) {\n            return;\n        }\n\n        \/\/ Check POST product-type (reliable on first publish; get_type() returns \"simple\" before term is saved).\n        $product_type = isset( $_POST['product-type'] ) ? sanitize_text_field( wp_unslash( $_POST['product-type'] ) ) : '';\n        if ( 'dutch_auction' !== $product_type ) {\n            return;\n        }\n\n        $start_price   = isset( $_POST['_kloktion_start_price'] ) ? floatval( $_POST['_kloktion_start_price'] ) : 0;\n        $no_reserve    = isset( $_POST['_kloktion_no_reserve'] ) && 'yes' === $_POST['_kloktion_no_reserve'];\n        $reserve_price = $no_reserve ? 0 : ( isset( $_POST['_kloktion_reserve_price'] ) ? floatval( $_POST['_kloktion_reserve_price'] ) : 0 );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : 0;\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n        if ( $duration <= 0 ) {\n            return;\n        }\n\n        update_post_meta( $post_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $post_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $post_id, '_kloktion_duration', $duration );\n\n        \/\/ WC price sync\n        update_post_meta( $post_id, '_regular_price', $start_price );\n        update_post_meta( $post_id, '_price', $start_price );\n\n        $current_status = Auction_Engine::get_status( $post_id );\n        $is_terminal    = in_array( $current_status, [ 'sold', 'expired', 'stopped' ], true );\n\n        $start_now = isset( $_POST['_kloktion_start_now'] ) && 'yes' === $_POST['_kloktion_start_now'];\n\n        if ( $start_now ) {\n            update_post_meta( $post_id, '_kloktion_start_time', time() );\n            update_post_meta( $post_id, '_kloktion_end_time', time() + $duration );\n\n            \/\/ Allow restart from terminal states (expired\/stopped) but not sold.\n            if ( 'active' !== $current_status && 'sold' !== $current_status ) {\n                update_post_meta( $post_id, '_kloktion_status', 'active' );\n                \/\/ Clear stale processing data.\n                delete_post_meta( $post_id, '_kloktion_processing_user' );\n                delete_post_meta( $post_id, '_kloktion_processing_since' );\n                delete_post_meta( $post_id, '_kloktion_pause_start' );\n                Logger::log( $post_id, 'active', $start_price, get_current_user_id() );\n                \/\/ Invalidate API cache.\n                delete_transient( 'kloktion_api_' . $post_id );\n                \/\/ Restore catalog visibility so restarted auction appears in shop.\n                $product = wc_get_product( $post_id );\n                if ( $product ) {\n                    $product->set_catalog_visibility( 'visible' );\n                    $product->save();\n                }\n            }\n        } elseif ( ! $is_terminal || 'stopped' === $current_status || 'expired' === $current_status ) {\n            \/\/ Allow scheduling from terminal states (except sold).\n            $schedule_date = isset( $_POST['_kloktion_schedule_date'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_date'] ) : '';\n            $schedule_time = isset( $_POST['_kloktion_schedule_time'] ) ? sanitize_text_field( $_POST['_kloktion_schedule_time'] ) : '00:00';\n            if ( ! empty( $schedule_date ) ) {\n                $timestamp = strtotime( $schedule_date . ' ' . $schedule_time . ' UTC' );\n                if ( $timestamp ) {\n                    update_post_meta( $post_id, '_kloktion_start_time', $timestamp );\n                    update_post_meta( $post_id, '_kloktion_end_time', $timestamp + $duration );\n                    update_post_meta( $post_id, '_kloktion_status', 'scheduled' );\n                    delete_post_meta( $post_id, '_kloktion_processing_user' );\n                    delete_post_meta( $post_id, '_kloktion_processing_since' );\n                    delete_post_meta( $post_id, '_kloktion_pause_start' );\n                    Logger::log( $post_id, 'scheduled', $start_price, get_current_user_id() );\n                    delete_transient( 'kloktion_api_' . $post_id );\n                }\n            }\n        }\n    }\n\n    public static function ajax_justice_button(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $result = Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $result ) {\n            if ( $notify_seller ) {\n                self::notify_seller( $product_id, $reason, 'stopped' );\n            }\n            wp_send_json_success( 'Auction stopped.' );\n        } else {\n            wp_send_json_error( 'Cannot stop auction in its current state.' );\n        }\n    }\n\n    public static function ajax_justice_delete(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $product_id    = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $reason        = isset( $_POST['reason'] ) ? sanitize_text_field( $_POST['reason'] ) : '';\n        $notify_seller = isset( $_POST['notify_seller'] ) && 'yes' === $_POST['notify_seller'];\n\n        if ( ! $product_id || empty( $reason ) ) {\n            wp_send_json_error( 'Product ID and reason are required.' );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || 'dutch_auction' !== $product->get_type() ) {\n            wp_send_json_error( 'This is not a Dutch Auction product.' );\n        }\n\n        Auction_Engine::stop_auction( $product_id, get_current_user_id(), $reason );\n\n        if ( $notify_seller ) {\n            self::notify_seller( $product_id, $reason, 'deleted' );\n        }\n\n        \/\/ Log before deletion since the post won't exist after.\n        Logger::log( $product_id, 'deleted', 0, get_current_user_id() );\n\n        $deleted = wp_delete_post( $product_id, true );\n\n        if ( $deleted ) {\n            wp_send_json_success( 'Auction permanently deleted.' );\n        } else {\n            wp_send_json_error( 'Failed to delete the auction product.' );\n        }\n    }\n\n    private static function notify_seller( int $product_id, string $reason, string $action ): void {\n        $product = wc_get_product( $product_id );\n        if ( ! $product ) {\n            return;\n        }\n\n        $author_id = get_post_field( 'post_author', $product_id );\n        $seller    = get_user_by( 'id', $author_id );\n        if ( ! $seller || ! $seller->user_email ) {\n            return;\n        }\n\n        $action_label = 'deleted' === $action ? __( 'deleted', 'kloktion-dutch-auction' ) : __( 'stopped', 'kloktion-dutch-auction' );\n        $subject      = sprintf(\n            __( 'Your auction \"%s\" has been %s', 'kloktion-dutch-auction' ),\n            $product->get_name(),\n            $action_label\n        );\n        $message = sprintf(\n            __( \"Hello %s,\\n\\nYour auction \\\"%s\\\" has been %s by the site administrator.\\n\\nReason: %s\\n\\nIf you have questions, please contact the marketplace support.\\n\\nRegards,\\n%s\", 'kloktion-dutch-auction' ),\n            $seller->display_name,\n            $product->get_name(),\n            $action_label,\n            $reason,\n            get_bloginfo( 'name' )\n        );\n\n        wp_mail( $seller->user_email, $subject, $message );\n    }\n\n    public static function add_log_metabox(): void {\n        add_meta_box(\n            'kloktion_auction_log',\n            __( 'Auction Log', 'kloktion-dutch-auction' ),\n            [ __CLASS__, 'render_log_metabox' ],\n            'product',\n            'normal',\n            'low'\n        );\n    }\n\n    public static function render_log_metabox( $post ): void {\n        $product = wc_get_product( $post->ID );\n        if ( ! $product instanceof Product_Type ) {\n            echo '<p>' . esc_html__( 'This is not a Dutch Auction product.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        $logs = Logger::get_log( $post->ID, 30 );\n\n        if ( empty( $logs ) ) {\n            echo '<p>' . esc_html__( 'No auction events logged yet.', 'kloktion-dutch-auction' ) . '<\/p>';\n            return;\n        }\n\n        echo '<table class=\"widefat striped\"><thead><tr>';\n        echo '<th>' . esc_html__( 'Date', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Event', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'Price', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<th>' . esc_html__( 'User', 'kloktion-dutch-auction' ) . '<\/th>';\n        echo '<\/tr><\/thead><tbody>';\n\n        foreach ( $logs as $log ) {\n            $user = $log->user_id ? get_user_by( 'id', $log->user_id ) : null;\n            echo '<tr>';\n            echo '<td>' . esc_html( $log->created_at ) . '<\/td>';\n            echo '<td><code>' . esc_html( $log->event ) . '<\/code><\/td>';\n            echo '<td>' . ( $log->price_at_event ? wp_kses_post( wc_price( $log->price_at_event ) ) : '\u2014' ) . '<\/td>';\n            echo '<td>' . esc_html( $user ? $user->display_name : ( $log->user_id ?: '\u2014' ) ) . '<\/td>';\n            echo '<\/tr>';\n        }\n\n        echo '<\/tbody><\/table>';\n    }\n\n    public static function render_dashboard(): void {\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/dashboard.php';\n    }\n\n    public static function render_moderation_queue(): void {\n        global $wpdb;\n\n        $table        = $wpdb->prefix . 'kloktion_moderation_queue';\n        $pending_items = $wpdb->get_results(\n            \"SELECT * FROM {$table} WHERE status = 'pending' ORDER BY submitted_at DESC\"\n        );\n\n        require KLOKTION_PLUGIN_DIR . 'admin\/views\/moderation-queue.php';\n    }\n\n    public static function ajax_moderation_approve(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id    = (int) $row->product_id;\n        $submitted_data = json_decode( $row->submitted_data, true );\n\n        \/\/ Stale queue guard: the product may have moved past pending_review (e.g. sold while in queue).\n        $current_kloktion_status = get_post_meta( $product_id, '_kloktion_status', true );\n        $terminal_states = [ 'sold', 'active', 'paused', 'processing', 'expired' ];\n        if ( in_array( $current_kloktion_status, $terminal_states, true ) ) {\n            \/\/ Clean up the orphan queue row.\n            $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n            wp_send_json_error( sprintf(\n                'Product is no longer eligible for moderation (current status: %s). Queue row removed.',\n                $current_kloktion_status\n            ) );\n        }\n\n        \/\/ Apply each meta key\/value from submitted data (blacklist managed fields).\n        if ( is_array( $submitted_data ) ) {\n            $blacklist = [ '_kloktion_status' ]; \/\/ managed separately via transition_status\n            foreach ( $submitted_data as $meta_key => $meta_value ) {\n                $key = sanitize_key( $meta_key );\n                if ( in_array( $key, $blacklist, true ) ) {\n                    continue;\n                }\n                \/\/ Normalize _kloktion_is_auction to '1' (force_auction_product_type does strict === '1' check).\n                if ( '_kloktion_is_auction' === $key && in_array( $meta_value, [ 'yes', 'true', true, 1 ], true ) ) {\n                    $meta_value = '1';\n                }\n                update_post_meta( $product_id, $key, $meta_value );\n            }\n        }\n\n        \/\/ Ensure _kloktion_status is 'pending_review' before transitioning so the\n        \/\/ valid_transitions table always has a matching entry. Without this, if submitted_data\n        \/\/ overwrote the status to something unexpected (or the meta was missing) the\n        \/\/ transition would silently return false and the status would stay wrong.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Determine target status based on start_time.\n        $start_time = (int) get_post_meta( $product_id, '_kloktion_start_time', true );\n        if ( $start_time <= 0 ) {\n            \/\/ No start date submitted (vendor form has no date picker) \u2192 start now.\n            $start_time = time();\n            update_post_meta( $product_id, '_kloktion_start_time', $start_time );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_time + $duration );\n            }\n            $new_status = 'active';\n        } else {\n            $new_status = ( $start_time <= time() ) ? 'active' : 'scheduled';\n        }\n        Auction_Engine::transition_status( $product_id, $new_status );\n\n        \/\/ Publish the WC post so it appears on the shop page and in the vendor dashboard.\n        \/\/ Vendor-submitted products land as 'pending'; approving must flip them to 'publish'.\n        \/\/ We call wp_update_post directly here (admin context, no Dokan hooks involved).\n        $post = get_post( $product_id );\n        if ( $post && 'publish' !== $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'publish',\n            ] );\n        }\n\n        \/\/ Restore catalog visibility (sync_catalog_visibility hook only fires when transitioning\n        \/\/ OUT of sold\/expired\/stopped \u2014 but for first-time approval from pending_review, that\n        \/\/ listener is a no-op, so set it explicitly).\n        $product_obj = wc_get_product( $product_id );\n        if ( $product_obj ) {\n            $product_obj->set_catalog_visibility( 'visible' );\n            $product_obj->save();\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'approved',\n                'admin_id'   => get_current_user_id(),\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_approved', $product_id );\n\n        wp_send_json_success( [ 'message' => __( 'Auction approved and scheduled.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_moderation_reject(): void {\n        check_ajax_referer( 'kloktion_admin', 'nonce' );\n\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( 'Unauthorized' );\n        }\n\n        $queue_id = isset( $_POST['queue_id'] ) ? absint( $_POST['queue_id'] ) : 0;\n        $reason   = isset( $_POST['reason'] ) ? sanitize_textarea_field( wp_unslash( $_POST['reason'] ) ) : '';\n\n        if ( ! $queue_id ) {\n            wp_send_json_error( 'Invalid queue ID.' );\n        }\n        if ( empty( $reason ) ) {\n            wp_send_json_error( 'Rejection reason is required.' );\n        }\n\n        global $wpdb;\n        $table = $wpdb->prefix . 'kloktion_moderation_queue';\n\n        $row = $wpdb->get_row( $wpdb->prepare( \"SELECT * FROM {$table} WHERE id = %d AND status = 'pending'\", $queue_id ) );\n        if ( ! $row ) {\n            wp_send_json_error( 'Queue item not found or already processed.' );\n        }\n\n        $product_id = (int) $row->product_id;\n\n        \/\/ Transition product back to stopped.\n        Auction_Engine::transition_status( $product_id, 'stopped', [\n            '_kloktion_stop_reason' => $reason,\n            '_kloktion_stop_by'     => get_current_user_id(),\n        ] );\n\n        \/\/ If product was never published (vendor's first submission), move to draft so the\n        \/\/ vendor can find, edit, and resubmit. Otherwise leave post_status as-is.\n        $post = get_post( $product_id );\n        if ( $post && 'pending' === $post->post_status ) {\n            wp_update_post( [\n                'ID'          => $product_id,\n                'post_status' => 'draft',\n            ] );\n        }\n\n        \/\/ Insert audit log entry BEFORE removing from queue.\n        $log_table = $wpdb->prefix . 'kloktion_moderation_log';\n        $wpdb->insert(\n            $log_table,\n            [\n                'queue_id'   => $queue_id,\n                'product_id' => $product_id,\n                'action'     => 'rejected',\n                'admin_id'   => get_current_user_id(),\n                'notes'      => $reason,\n                'created_at' => current_time( 'mysql', true ),\n            ],\n            [ '%d', '%d', '%s', '%d', '%s', '%s' ]\n        );\n\n        \/\/ Remove queue row \u2014 history is preserved in the log table.\n        $wpdb->delete( $table, [ 'id' => $queue_id ], [ '%d' ] );\n\n        \/\/ Fire action for email notification (handled by Emails class).\n        do_action( 'kloktion_moderation_rejected', $product_id, $reason );\n\n        wp_send_json_success( [ 'message' => __( 'Auction rejected.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_disputes_page(): void {\n        global $wpdb;\n        $disputes_table = $wpdb->prefix . 'kloktion_disputes';\n        $escrow_table   = $wpdb->prefix . 'kloktion_escrow';\n\n        \/\/ Handle view detail \/ resolve actions.\n        $view_id = isset( $_GET['view'] ) ? (int) $_GET['view'] : 0;\n\n        if ( $view_id > 0 ) {\n            $dispute = $wpdb->get_row( $wpdb->prepare(\n                \"SELECT d.*, e.amount, e.currency, e.vendor_id, e.product_id, e.charge_id, e.status as escrow_status\n                 FROM $disputes_table d\n                 LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n                 WHERE d.id = %d\",\n                $view_id\n            ) );\n            if ( ! $dispute ) {\n                echo '<div class=\"wrap\"><h1>' . esc_html__( 'Dispute not found', 'kloktion-dutch-auction' ) . '<\/h1><\/div>';\n                return;\n            }\n            include KLOKTION_PLUGIN_DIR . 'admin\/views\/dispute-detail.php';\n            return;\n        }\n\n        \/\/ List view \u2014 open disputes first, then resolved.\n        $disputes = $wpdb->get_results(\n            \"SELECT d.*, e.amount, e.currency, e.vendor_id\n             FROM $disputes_table d\n             LEFT JOIN $escrow_table e ON d.escrow_id = e.id\n             ORDER BY CASE d.status WHEN 'open' THEN 0 ELSE 1 END, d.created_at DESC\n             LIMIT 100\"\n        );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/disputes-list.php';\n    }\n\n    public static function ajax_dispute_resolve_release(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Release escrow (funds go to seller).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            \\Kloktion\\Stripe_Payment::release_escrow( $dispute->escrow_id, 'admin_release' );\n        }\n\n        \/\/ Mark dispute resolved.\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_release',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_release', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Dispute resolved \u2014 funds released to seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function ajax_dispute_resolve_refund(): void {\n        check_ajax_referer( 'kloktion_admin', '_wpnonce' );\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => 'Permission denied' ] );\n        }\n\n        $dispute_id = (int) ( $_POST['dispute_id'] ?? 0 );\n        $notes      = sanitize_textarea_field( $_POST['notes'] ?? '' );\n\n        global $wpdb;\n        $dispute = $wpdb->get_row( $wpdb->prepare(\n            \"SELECT * FROM {$wpdb->prefix}kloktion_disputes WHERE id = %d\",\n            $dispute_id\n        ) );\n        if ( ! $dispute || 'open' !== $dispute->status ) {\n            wp_send_json_error( [ 'message' => 'Dispute not found or already resolved' ] );\n        }\n\n        \/\/ Refund via Stripe (reverses the destination charge).\n        if ( class_exists( '\\\\Kloktion\\\\Stripe_Payment' ) ) {\n            $refund = \\Kloktion\\Stripe_Payment::refund_payment( $dispute->escrow_id, $notes );\n            if ( is_wp_error( $refund ) ) {\n                wp_send_json_error( [ 'message' => 'Refund failed: ' . $refund->get_error_message() ] );\n            }\n        }\n\n        $wpdb->update(\n            $wpdb->prefix . 'kloktion_disputes',\n            [\n                'status'      => 'resolved_refund',\n                'admin_id'    => get_current_user_id(),\n                'admin_notes' => $notes,\n                'resolved_at' => current_time( 'mysql' ),\n            ],\n            [ 'id' => $dispute_id ]\n        );\n\n        do_action( 'kloktion_dispute_resolved_refund', $dispute_id );\n        wp_send_json_success( [ 'message' => __( 'Buyer refunded \u2014 funds reversed from seller', 'kloktion-dutch-auction' ) ] );\n    }\n\n    \/**\n     * R12: Manually release a stuck pending_purchase lot and restart the auction.\n     *\/\n    public static function ajax_release_pending(): void {\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n        $nonce      = isset( $_POST['nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : '';\n        $reason     = isset( $_POST['reason'] ) ? sanitize_key( wp_unslash( $_POST['reason'] ) ) : 'admin_decision';\n\n        if ( ! $product_id || ! wp_verify_nonce( $nonce, 'kloktion_release_pending_' . $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ], 400 );\n        }\n        if ( ! current_user_can( 'manage_woocommerce' ) ) {\n            wp_send_json_error( [ 'message' => __( 'Permission denied.', 'kloktion-dutch-auction' ) ], 403 );\n        }\n\n        \/\/ FIX A1: Atomic SQL claim \u2014 replaces in-process wp_cache_add lock.\n        \/\/ Only ONE caller can flip pending_purchase \u2192 releasing; concurrent requests get 409.\n        global $wpdb;\n        $rows = $wpdb->query( $wpdb->prepare(\n            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n            'releasing',\n            $product_id,\n            '_kloktion_status',\n            'pending_purchase'\n        ) );\n        if ( 1 !== (int) $rows ) {\n            wp_send_json_error( [ 'message' => __( 'Auction state changed. Reload and retry.', 'kloktion-dutch-auction' ) ], 409 );\n        }\n        \/\/ Flush WP object cache so subsequent get_post_meta reads reflect 'releasing'.\n        wp_cache_delete( $product_id, 'post_meta' );\n\n        \/\/ Whitelist reason values.\n        $allowed_reasons = [ 'penalty_unpaid', 'seller_request', 'admin_decision' ];\n        if ( ! in_array( $reason, $allowed_reasons, true ) ) {\n            $reason = 'admin_decision';\n        }\n\n        \/\/ Cancel pending order.\n        $order_id = (int) get_post_meta( $product_id, '_kloktion_pending_order', true );\n        if ( $order_id && function_exists( 'wc_get_order' ) ) {\n            $order = wc_get_order( $order_id );\n            if ( $order ) {\n                \/\/ Marker is written UNCONDITIONALLY so late async webhooks on already-cancelled\/failed\n                \/\/ orders still hit the checkout-handler guard and cannot re-trigger the sale.\n                $order->update_meta_data( '_kloktion_released_by_admin', '1' );\n                $order->update_meta_data( '_kloktion_release_reason', $reason );\n                $order->save();\n\n                if ( ! in_array( $order->get_status(), [ 'cancelled', 'refunded', 'failed' ], true ) ) {\n                    $cancel_result = $order->update_status(\n                        'cancelled',\n                        sprintf(\n                            \/* translators: %s: reason key *\/\n                            __( 'Admin released pending purchase. Reason: %s', 'kloktion-dutch-auction' ),\n                            $reason\n                        )\n                    );\n                    if ( ! $cancel_result ) {\n                        \/\/ Rollback: restore pending_purchase + strip poison-pill release marker so the buyer can still pay.\n                        $order->delete_meta_data( '_kloktion_released_by_admin' );\n                        $order->delete_meta_data( '_kloktion_release_reason' );\n                        $order->save();\n                        $wpdb->query( $wpdb->prepare(\n                            \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                            'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n                        ) );\n                        wp_cache_delete( $product_id, 'post_meta' );\n                        wp_send_json_error( [ 'message' => __( 'Failed to cancel the pending order. No changes made.', 'kloktion-dutch-auction' ) ], 500 );\n                    }\n                }\n            }\n        }\n\n        \/\/ Clear pending meta.\n        delete_post_meta( $product_id, '_kloktion_pending_user' );\n        delete_post_meta( $product_id, '_kloktion_pending_order' );\n        delete_post_meta( $product_id, '_kloktion_pending_price' );\n        delete_post_meta( $product_id, '_kloktion_payment_deadline' );\n\n        \/\/ Reset auction price + time.\n        $start_price = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $duration    = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n        $now         = time();\n\n        if ( $start_price <= 0 ) {\n            \/\/ Rollback: cannot restart without a valid start price. Strip poison-pill release marker so the buyer can still pay.\n            if ( isset( $order ) && $order ) {\n                $order->delete_meta_data( '_kloktion_released_by_admin' );\n                $order->delete_meta_data( '_kloktion_release_reason' );\n                $order->save();\n            }\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Auction has no start price configured. Cannot restart.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_current_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_start_time', $now );\n        if ( $duration > 0 ) {\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n        }\n\n        \/\/ Transition status: releasing \u2192 active (via transition table).\n        $transitioned = \\Kloktion\\Auction_Engine::transition_status( $product_id, 'active', [] );\n        if ( ! $transitioned ) {\n            \/\/ Rollback: transition blocked (edge case \u2014 status may have been mutated externally). Strip poison-pill release marker so the buyer can still pay.\n            if ( isset( $order ) && $order ) {\n                $order->delete_meta_data( '_kloktion_released_by_admin' );\n                $order->delete_meta_data( '_kloktion_release_reason' );\n                $order->save();\n            }\n            $wpdb->query( $wpdb->prepare(\n                \"UPDATE {$wpdb->postmeta} SET meta_value = %s WHERE post_id = %d AND meta_key = %s AND meta_value = %s\",\n                'pending_purchase', $product_id, '_kloktion_status', 'releasing'\n            ) );\n            wp_cache_delete( $product_id, 'post_meta' );\n            wp_send_json_error( [ 'message' => __( 'Transition to active failed. Auction status restored. Reload and retry.', 'kloktion-dutch-auction' ) ], 500 );\n        }\n\n        \/\/ Log the admin action.\n        Logger::log(\n            $product_id,\n            'admin_release_pending',\n            $start_price,\n            get_current_user_id(),\n            [ 'reason' => $reason, 'cancelled_order' => $order_id ]\n        );\n\n        wp_send_json_success( [ 'message' => __( 'Auction released and restarted.', 'kloktion-dutch-auction' ) ] );\n    }\n\n    public static function render_settings(): void {\n        if ( isset( $_POST['kloktion_settings_nonce'] ) && wp_verify_nonce( $_POST['kloktion_settings_nonce'], 'kloktion_save_settings' ) && current_user_can( 'manage_woocommerce' ) ) {\n            $settings = [\n                'global_pause'            => ! empty( $_POST['global_pause'] ) ? 1 : 0,\n                'default_duration'        => absint( $_POST['default_duration'] ?? 86400 ),\n                'pause_duration'          => absint( $_POST['pause_duration'] ?? 180 ),\n                'freeze_timeout'          => absint( $_POST['freeze_timeout'] ?? 600 ),\n                'rate_limit'              => absint( $_POST['rate_limit'] ?? 60 ),\n                'poll_interval'           => absint( $_POST['poll_interval'] ?? 2 ),\n                'processing_timeout'      => absint( $_POST['processing_timeout'] ?? 900 ),\n                'moderation_enabled'      => ! empty( $_POST['moderation_enabled'] ) ? 1 : 0,\n                'escrow_enabled'          => ! empty( $_POST['escrow_enabled'] ) ? 1 : 0,\n                'stripe_platform_secret'  => sanitize_text_field( $_POST['stripe_platform_secret'] ?? '' ),\n                'stripe_webhook_secret'   => sanitize_text_field( $_POST['stripe_webhook_secret'] ?? '' ),\n                'commission_percent'      => max( 0, min( 100, (float) ( $_POST['commission_percent'] ?? 10 ) ) ),\n                'dispute_window_days'     => max( 1, min( 60, (int) ( $_POST['dispute_window_days'] ?? 7 ) ) ),\n                'auto_release_days'       => max( 1, min( 60, (int) ( $_POST['auto_release_days'] ?? 10 ) ) ),\n            ];\n            update_option( 'kloktion_settings', $settings );\n            \/\/ reCAPTCHA keys stored as standalone options (not inside $settings array).\n            update_option( 'kloktion_recaptcha_site_key', sanitize_text_field( $_POST['kloktion_recaptcha_site_key'] ?? '' ) );\n            update_option( 'kloktion_recaptcha_secret_key', sanitize_text_field( $_POST['kloktion_recaptcha_secret_key'] ?? '' ) );\n            echo '<div class=\"updated\"><p>' . esc_html__( 'Settings saved.', 'kloktion-dutch-auction' ) . '<\/p><\/div>';\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        include KLOKTION_PLUGIN_DIR . 'admin\/views\/settings.php';\n    }\n}\n"},"result":null}
{"timestamp":"2026-05-24 10:58:44","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-admin.php"},"result":null}
{"timestamp":"2026-05-24 12:47:38","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_test_create_buyer.php","content":"<?php\n\/\/ One-shot test-buyer creator, IP-gated + token. Will be neutralized immediately after use.\ndefine( 'SHORTINIT', false );\n$ip = $_SERVER['HTTP_CF_CONNECTING_IP'] ?? $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'] ?? '';\n$allowed = ['78.46.49.27','2a01:4f8:110:1444::2'];\nif ( ! in_array( trim( explode(',', $ip)[0] ), $allowed, true ) ) {\n    http_response_code(403);\n    exit('IP not allowed: ' . htmlspecialchars($ip));\n}\nif ( ( $_GET['token'] ?? '' ) !== '3718e064bea001481ff186ab4d3960b8' ) {\n    http_response_code(403);\n    exit('Bad token');\n}\n\nrequire_once dirname(__DIR__, 3) . '\/wp-load.php';\n\n$login = 'qatestbuyer';\n$email = 'qatestbuyer@kloktion.local';\n$pwd   = 'QaTest' . bin2hex(random_bytes(6));\n\n$existing = get_user_by('login', $login);\nif ( $existing ) {\n    wp_set_password($pwd, $existing->ID);\n    $uid = $existing->ID;\n} else {\n    $uid = wp_create_user($login, $pwd, $email);\n    if ( is_wp_error($uid) ) {\n        http_response_code(500);\n        echo json_encode(['error'=>$uid->get_error_message()]);\n        exit;\n    }\n}\n$user = new WP_User($uid);\n$user->set_role('customer');\n\necho json_encode([\n    'user_id' => $uid,\n    'login'   => $login,\n    'password'=> $pwd,\n    'email'   => $email,\n    'role'    => 'customer',\n]);\n"},"result":null}
{"timestamp":"2026-05-24 12:47:40","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_test_create_buyer.php","content":"<?php exit;"},"result":null}
{"timestamp":"2026-05-25 06:48:25","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.6\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.6' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-05-25 06:48:25","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.6 - 2026-05-25 =\n* UX: Cloudflare Turnstile widget now appears together with the Buy Now button (after the user slides the activation toggle), instead of showing immediately on page load.\n* UX: Added a 16px breathing-room gap between the activation slider and the Turnstile widget (12px on mobile) so the two controls no longer sit flush against each other.\n\n= 3.4.5 - 2026-05-24 =\n* UX: Stronger visual separation between the activation slider and Buy Now button - 28px margin + 24px padding + 1px divider line, with higher CSS specificity so theme button rules cannot override the gap.\n* Feature: WP-Admin \"Put back on sale\" control on stuck pending_purchase lots. Cancels the pending order, clears the 96h reservation, restarts the auction from the original start price and duration. Reason dropdown (penalty unpaid \/ seller request \/ admin decision) records intent in the order note and Logger entry.\n* Feature: Dokan vendor product form now blocks save when Dutch Auction Start Price is missing or zero. Visible WooCommerce error notice on the server side plus a JS hint that highlights the field and focuses it on submit.\n* Feature: Dokan vendor product form hides the standard WooCommerce Regular\/Sale price fields and the entire Inventory section. Dutch Auction lots are unique and their price is derived from _kloktion_start_price - the extra fields only confused vendors.\n* Security: Cloudflare Turnstile integration on the one-click buy flow. Widget renders between the slider track and the Buy Now button. Token is verified server-side via siteverify before any pending_purchase is created. Fail-closed once the secret is set; fail-open by default until the operator enables it via wp_option kloktion_turnstile_secret.\n* DX: Added DESIGN.md baseline (Google design.md spec) at the repo root to lock in tokens for future UI changes.\n\n= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-05-25 06:48:26","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/css\/kloktion-frontend.css","content":"\/* Kloktion frontend *\/\n\/* Anti-bot honeypot *\/\n.kloktion-honeypot,\n.kloktion-honeypot-field {\n    position: absolute !important;\n    left: -10000px !important;\n    top: auto !important;\n    width: 1px !important;\n    height: 1px !important;\n    overflow: hidden !important;\n    opacity: 0 !important;\n    pointer-events: none !important;\n}\n\n.kloktion-auction {\n    border: 1px solid #e0e0e0;\n    border-radius: 8px;\n    padding: 20px;\n    margin-bottom: 24px;\n    background: #fff;\n    font-family: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Oxygen, Ubuntu, sans-serif;\n}\n\n\n.kloktion-header {\n    display: flex;\n    align-items: center;\n    justify-content: space-between;\n    margin-bottom: 16px;\n}\n\n.kloktion-type-label {\n    font-size: 12px;\n    text-transform: uppercase;\n    letter-spacing: 0.5px;\n    color: #888;\n    font-weight: 600;\n}\n\n\n.kloktion-badge {\n    display: inline-block;\n    padding: 4px 12px;\n    border-radius: 4px;\n    font-size: 12px;\n    font-weight: 700;\n    letter-spacing: 0.5px;\n    text-transform: uppercase;\n    line-height: 1.4;\n}\n\n.kloktion-badge--active {\n    background: #e8f5e9;\n    color: #2e7d32;\n    display: inline-flex;\n    align-items: center;\n    gap: 6px;\n    animation: kloktion-badge-glow 3s ease-in-out infinite;\n}\n\n.kloktion-live-dot {\n    display: inline-block;\n    width: 8px;\n    height: 8px;\n    border-radius: 50%;\n    background: #2e7d32;\n    animation: kloktion-dot-pulse 2s ease-in-out infinite;\n}\n\n.kloktion-badge--paused {\n    background: #fff3e0;\n    color: #e65100;\n    animation: kloktion-pulse 1s ease-in-out infinite;\n}\n\n.kloktion-badge--scheduled {\n    background: #e3f2fd;\n    color: #1565c0;\n}\n\n.kloktion-badge--processing {\n    background: #fff8e1;\n    color: #f57f17;\n}\n\n.kloktion-badge--sold {\n    background: #e8f5e9;\n    color: #1b5e20;\n}\n\n.kloktion-badge--ended,\n.kloktion-badge--stopped {\n    background: #f5f5f5;\n    color: #616161;\n}\n\n@keyframes kloktion-badge-glow {\n    0%, 100% { opacity: 1; box-shadow: 0 0 0 0 rgba(46, 125, 50, 0); }\n    50% { opacity: 0.85; box-shadow: 0 0 8px 2px rgba(46, 125, 50, 0.3); }\n}\n\n@keyframes kloktion-dot-pulse {\n    0%, 100% { opacity: 1; transform: scale(1); }\n    50% { opacity: 0.4; transform: scale(0.7); }\n}\n\n@keyframes kloktion-pulse {\n    0%, 100% { opacity: 1; }\n    50% { opacity: 0.7; }\n}\n\n\n.kloktion-price-display {\n    text-align: center;\n    margin-bottom: 20px;\n}\n\n.kloktion-price__original {\n    font-size: 13px;\n    color: #888;\n    margin-top: 6px;\n}\n\n.kloktion-price__current {\n    font-size: 32px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1.2;\n    font-variant-numeric: tabular-nums;\n    transition: color 0.3s ease;\n}\n\n.kloktion-price--updating {\n    color: #2e7d32 !important;\n}\n\n.kloktion-savings {\n    display: inline-block;\n    margin-top: 6px;\n    padding: 2px 10px;\n    background: #e8f5e9;\n    color: #2e7d32;\n    border-radius: 12px;\n    font-size: 13px;\n    font-weight: 600;\n}\n\n\n.kloktion-progress {\n    margin-bottom: 20px;\n}\n\n.kloktion-progress__bar {\n    height: 8px;\n    background: #f0f0f0;\n    border-radius: 4px;\n    overflow: hidden;\n    position: relative;\n}\n\n.kloktion-progress__fill {\n    height: 100%;\n    background: linear-gradient(90deg, #2e7d32, #66bb6a);\n    border-radius: 4px;\n    transition: width 0.5s ease;\n    min-width: 0;\n}\n\n.kloktion-progress__labels {\n    display: flex;\n    justify-content: space-between;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.kloktion-timer {\n    text-align: center;\n}\n\n.kloktion-timer__label {\n    font-size: 13px;\n    color: #666;\n    margin-bottom: 8px;\n}\n\n.kloktion-timer__digits {\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    gap: 4px;\n}\n\n.kloktion-timer__unit {\n    display: inline-block;\n    min-width: 44px;\n    padding: 8px 4px;\n    background: #1a1a1a;\n    color: #fff;\n    font-size: 24px;\n    font-weight: 700;\n    font-variant-numeric: tabular-nums;\n    border-radius: 6px;\n    text-align: center;\n    line-height: 1;\n}\n\n.kloktion-timer__sep {\n    font-size: 24px;\n    font-weight: 700;\n    color: #1a1a1a;\n    line-height: 1;\n}\n\n\n.kloktion-scheduled-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-price-display--sold .kloktion-price__current {\n    color: #2e7d32;\n}\n\n.kloktion-sold-note {\n    font-size: 14px;\n    color: #666;\n    margin-top: 8px;\n}\n\n\n.kloktion-processing-notice {\n    text-align: center;\n    padding: 12px 16px;\n    background: #fff8e1;\n    border: 1px solid #ffe082;\n    border-radius: 6px;\n    color: #f57f17;\n    font-size: 13px;\n    margin: 12px 0;\n}\n\n.kloktion-ended {\n    text-align: center;\n    padding: 16px 0;\n    color: #888;\n    font-size: 15px;\n}\n\n\n.kloktion-auction ~ form .single_add_to_cart_button,\n.kloktion-auction ~ .cart .single_add_to_cart_button {\n    width: 100%;\n    padding: 14px 16px;\n    font-size: 16px;\n    font-weight: 600;\n    text-transform: none;\n    letter-spacing: 0;\n    white-space: nowrap;\n}\n\n\n.kloktion-archive-badge {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 1;\n    padding: 3px 8px;\n    border-radius: 3px;\n    font-size: 10px;\n    font-weight: 700;\n    text-transform: uppercase;\n    letter-spacing: 0.3px;\n    line-height: 1.4;\n}\n\n.kloktion-archive-badge--active {\n    background: #2e7d32;\n    color: #fff;\n}\n\n.kloktion-archive-badge--paused {\n    background: #e65100;\n    color: #fff;\n}\n\n.kloktion-archive-badge--scheduled {\n    background: #1565c0;\n    color: #fff;\n}\n\n\n.kloktion-one-click {\n    margin: 12px 0;\n    text-align: center;\n}\n\n.kloktion-one-click__instruction {\n    display: block;\n    margin-bottom: 8px;\n    font-size: 14px;\n    font-weight: 600;\n    color: #333;\n}\n\n.kloktion-one-click__track {\n    position: relative;\n    width: 100%;\n    height: 52px;\n    border-radius: 26px;\n    overflow: hidden;\n    background: rgba(0, 0, 0, 0.06);\n    display: flex;\n    align-items: center;\n}\n\n.kloktion-one-click__label {\n    position: absolute;\n    left: 0;\n    right: 0;\n    text-align: center;\n    font-size: 15px;\n    font-weight: 600;\n    color: #333;\n    pointer-events: none;\n    user-select: none;\n    padding-left: 52px;\n}\n\n.kloktion-one-click--active .kloktion-one-click__track {\n    background: rgba(93, 45, 163, 0.12);\n}\n\n.kloktion-one-click--active .kloktion-one-click__label {\n    color: #5d2da3;\n}\n\n.kloktion-one-click__btn {\n    position: absolute;\n    left: 0;\n    top: 0;\n    width: 52px;\n    height: 52px;\n    padding: 0;\n    font-size: 20px;\n    font-weight: 700;\n    background: #5d2da3;\n    color: #fff;\n    border: none;\n    border-radius: 26px;\n    cursor: grab;\n    white-space: nowrap;\n    touch-action: none;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    transition: transform 220ms ease-out;\n    z-index: 2;\n    flex-shrink: 0;\n}\n\n\/* v3.4.5: stronger separation - higher specificity beats theme button rules *\/\nbody .kloktion-one-click .kloktion-one-click__buy,\nbody .kloktion-one-click__track + .kloktion-one-click__buy {\n    display: block !important;\n    width: 100% !important;\n    margin: 28px 0 0 0 !important;\n    padding-top: 24px;\n    border-top: 1px solid rgba(127, 127, 127, 0.25);\n    position: relative;\n}\n\n@media (max-width: 767px) {\n    body .kloktion-one-click .kloktion-one-click__buy,\n    body .kloktion-one-click__track + .kloktion-one-click__buy {\n        margin-top: 16px !important;\n        padding-top: 12px;\n    }\n}\n\nbody .kloktion-one-click .kloktion-one-click__buy[hidden],\n.kloktion-one-click__buy[hidden] {\n    display: none !important;\n}\n\n\/* v3.4.6: Turnstile widget wrapper \u2014 hidden until activation, with breathing room above *\/\nbody .kloktion-one-click .kloktion-one-click__turnstile {\n    display: block;\n    margin-top: 16px;\n}\n\nbody .kloktion-one-click .kloktion-one-click__turnstile[hidden] {\n    display: none !important;\n}\n\n@media (max-width: 767px) {\n    body .kloktion-one-click .kloktion-one-click__turnstile {\n        margin-top: 12px;\n    }\n}\n\n.kloktion-one-click__btn--sliding {\n    transition: none;\n    cursor: grabbing;\n    user-select: none;\n}\n\n.kloktion-one-click__note {\n    display: block;\n    margin-top: 6px;\n    font-size: 12px;\n    color: #888;\n}\n\n\n.woocommerce-product-gallery {\n    position: relative;\n}\n\n.kloktion-heart {\n    position: absolute;\n    top: 12px;\n    right: 12px;\n    z-index: 10;\n    width: 44px;\n    height: 44px;\n    border-radius: 50%;\n    border: none;\n    background: rgba(255, 255, 255, 0.9);\n    backdrop-filter: blur(4px);\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 2px 8px rgba(0, 0, 0, 0.12);\n    transition: transform 0.2s ease, background 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.kloktion-heart svg {\n    fill: none;\n    stroke: #555;\n    stroke-width: 2;\n    transition: fill 0.3s ease, stroke 0.3s ease;\n}\n\n.kloktion-heart--archive svg {\n    stroke: #888;\n    stroke-width: 2.5;\n}\n\n.kloktion-heart--active svg {\n    fill: #e53935;\n    stroke: #e53935;\n}\n\n.kloktion-heart:hover svg {\n    stroke: #e53935;\n}\n\n.kloktion-heart--active:hover svg {\n    fill: #c62828;\n    stroke: #c62828;\n}\n\n@keyframes kloktion-heart-pop {\n    0% { transform: scale(1); }\n    30% { transform: scale(1.3); }\n    60% { transform: scale(0.9); }\n    100% { transform: scale(1); }\n}\n\n.kloktion-heart--animating {\n    animation: kloktion-heart-pop 0.4s ease;\n}\n\n\n.kloktion-heart--archive {\n    position: absolute;\n    top: 8px;\n    left: 8px;\n    z-index: 3;\n    width: 34px;\n    height: 34px;\n    border-radius: 50%;\n    border: 1px solid rgba(0, 0, 0, 0.08);\n    background: #fff;\n    cursor: pointer;\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    box-shadow: 0 1px 6px rgba(0, 0, 0, 0.15);\n    transition: transform 0.2s ease, box-shadow 0.2s ease;\n    padding: 0;\n}\n\n.kloktion-heart--archive:hover {\n    transform: scale(1.1);\n    background: rgba(255, 255, 255, 1);\n}\n\n.woocommerce ul.products li.product .woocommerce-loop-product__link {\n    position: relative;\n}\n\n\n.kloktion-watch {\n    margin: 12px 0;\n}\n\n.kloktion-watch__btn {\n    cursor: pointer;\n    border: 1px solid #ccc;\n    background: #fff;\n    color: #333;\n    padding: 8px 16px;\n    border-radius: 4px;\n    font-size: 13px;\n    font-weight: 600;\n    transition: all 0.2s ease;\n}\n\n.kloktion-watch__btn:hover {\n    border-color: #2e7d32;\n    color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active {\n    background: #2e7d32;\n    color: #fff;\n    border-color: #2e7d32;\n}\n\n.kloktion-watch__btn.kloktion-watch--active:hover {\n    background: #c62828;\n    border-color: #c62828;\n}\n\n\n@media (max-width: 480px) {\n    .kloktion-auction {\n        padding: 16px;\n    }\n\n    .kloktion-price__current {\n        font-size: 26px;\n    }\n\n    .kloktion-timer__unit {\n        min-width: 36px;\n        font-size: 20px;\n        padding: 6px 4px;\n    }\n\n    .kloktion-timer__sep {\n        font-size: 20px;\n    }\n\n    .woocommerce ul.products li.product,\n    .woocommerce-page ul.products li.product {\n        width: 100% !important;\n        float: none !important;\n    }\n}\n\n\/* Global Pause notice *\/\n.kloktion-global-pause-notice {\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 6px;\n    padding: 12px 16px;\n    margin-bottom: 16px;\n    color: #856404;\n    font-weight: 500;\n    text-align: center;\n}\n\n\/* Payment method on thank-you page *\/\n.kloktion-payment-method {\n    margin-top: 12px;\n}\n\n\/* === CARD POPUP === *\/\n.kloktion-popup-overlay {\n    position: fixed;\n    top: 0; left: 0; right: 0; bottom: 0;\n    background: rgba(0,0,0,0.5);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    z-index: 999999;\n}\n.kloktion-popup {\n    background: #fff;\n    border-radius: 12px;\n    padding: 30px;\n    max-width: 400px;\n    width: 90%;\n    text-align: center;\n    position: relative;\n    box-shadow: 0 10px 40px rgba(0,0,0,0.2);\n}\n.kloktion-popup__close {\n    position: absolute;\n    top: 10px; right: 15px;\n    background: none;\n    border: none;\n    font-size: 24px;\n    cursor: pointer;\n    color: #999;\n    line-height: 1;\n}\n.kloktion-popup__close:hover { color: #333; }\n.kloktion-popup__icon { font-size: 48px; margin-bottom: 10px; }\n.kloktion-popup__title { font-size: 20px; margin: 0 0 10px; }\n.kloktion-popup__text { color: #666; margin-bottom: 20px; font-size: 14px; }\n.kloktion-popup__btn { display: inline-block; min-width: 200px; }\n\n\/* === ALERT BANNER === *\/\n.kloktion-alert-banner {\n    background: #fff3cd !important;\n    border-bottom: 1px solid #ffc107;\n    padding: 12px 20px;\n    text-align: center;\n    font-size: 14px;\n    color: #856404;\n    position: sticky;\n    top: 0;\n    left: 0;\n    z-index: 99999;\n    width: 100%;\n    box-sizing: border-box;\n}\nbody .dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-dashboard-wrap .kloktion-alert-banner,\n.dokan-dashboard .kloktion-alert-banner,\n.dokan-dashboard-wrap .kloktion-alert-banner,\nbody.dokan-store .kloktion-alert-banner,\n.dokan-store-page .kloktion-alert-banner {\n    position: relative !important;\n    top: auto !important;\n    z-index: 1 !important;\n    width: 100% !important;\n    max-width: 100% !important;\n    margin: 0 0 12px 0 !important;\n}\n.kloktion-alert-banner a {\n    color: #533f03;\n    font-weight: 600;\n    text-decoration: underline;\n}\n.kloktion-alert-banner__close {\n    position: absolute;\n    right: 10px;\n    top: 50%;\n    transform: translateY(-50%);\n    background: none;\n    border: none;\n    font-size: 16px;\n    cursor: pointer;\n    color: #856404;\n}\n\n\/* === TRUST BADGE === *\/\n.kloktion-trust-badge {\n    display: flex;\n    align-items: center;\n    gap: 6px;\n    margin: 8px 0;\n    padding: 6px 12px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 6px;\n    font-size: 12px;\n    color: #2e7d32;\n}\n.kloktion-trust-badge__icon { font-size: 14px; }\n.kloktion-trust-badge__text { font-weight: 500; }\n\n\/* === MY WALLET === *\/\n.kloktion-wallet { max-width: 600px; }\n.kloktion-wallet h3 { margin-bottom: 20px; }\n.kloktion-wallet__card {\n    display: flex;\n    align-items: center;\n    gap: 15px;\n    padding: 20px;\n    background: #f8f9fa;\n    border: 1px solid #dee2e6;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__brand {\n    font-weight: 600;\n    font-size: 14px;\n    text-transform: uppercase;\n    color: #333;\n}\n.kloktion-wallet__last4 {\n    font-family: 'Courier New', monospace;\n    font-size: 16px;\n    letter-spacing: 1px;\n    display: block;\n}\n.kloktion-wallet__expiry {\n    font-size: 13px;\n    color: #666;\n}\n.kloktion-wallet__card-actions {\n    margin-left: auto;\n    display: flex;\n    gap: 8px;\n}\n.kloktion-wallet__remove-btn {\n    color: #dc3545 !important;\n    border-color: #dc3545 !important;\n}\n.kloktion-wallet__no-card {\n    padding: 20px;\n    background: #fff3cd;\n    border: 1px solid #ffc107;\n    border-radius: 8px;\n    margin-bottom: 20px;\n}\n.kloktion-wallet__consent {\n    margin: 15px 0;\n    padding: 15px;\n    background: #f8f9fa;\n    border-radius: 8px;\n}\n.kloktion-wallet__consent-label {\n    display: flex;\n    align-items: flex-start;\n    gap: 10px;\n    cursor: pointer;\n    font-size: 14px;\n    line-height: 1.5;\n}\n.kloktion-wallet__consent-label input {\n    margin-top: 3px;\n    flex-shrink: 0;\n}\n.kloktion-wallet__errors {\n    color: #dc3545;\n    font-size: 14px;\n    margin: 10px 0;\n    min-height: 20px;\n}\n.kloktion-wallet__save-btn {\n    margin-top: 10px;\n}\n.kloktion-wallet__badge {\n    margin-top: 20px;\n    padding: 15px;\n    background: #f0faf0;\n    border: 1px solid #c8e6c9;\n    border-radius: 8px;\n}\n.kloktion-secure-badge {\n    font-weight: 600;\n    color: #2e7d32;\n}\n.kloktion-wallet__note {\n    font-size: 12px;\n    color: #666;\n    margin-top: 5px;\n}\n#kloktion-card-element {\n    padding: 12px;\n    border: 1px solid #ddd;\n    border-radius: 6px;\n    background: #fff;\n}\n.kloktion-wallet__add-form {\n    margin: 15px 0;\n}\n\n\/* === RESPONSIVE === *\/\n@media (max-width: 600px) {\n    .kloktion-wallet__card {\n        flex-direction: column;\n        text-align: center;\n    }\n    .kloktion-wallet__card-actions {\n        margin-left: 0;\n    }\n    .kloktion-popup {\n        padding: 20px;\n        margin: 0 10px;\n    }\n}\n\n\/* === Smart Card Popup === *\/\n.kloktion-popup-overlay{position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:9999;display:flex;align-items:center;justify-content:center;padding:20px}\n.kloktion-popup-box{background:#fff;border-radius:8px;max-width:460px;width:100%;padding:26px;box-shadow:0 10px 40px rgba(0,0,0,.25);position:relative}\n.kloktion-popup-close{position:absolute;top:10px;right:14px;background:none;border:none;font-size:24px;cursor:pointer}\n.kloktion-card-field{border:1px solid #ccc;border-radius:4px;padding:12px;margin:14px 0}\n.kloktion-card-errors{color:#c62828;font-size:13px;margin-bottom:10px;min-height:18px}\n.kloktion-popup-submit{width:100%;padding:12px;font-size:15px}\n.kloktion-popup-fallback{text-align:center;font-size:13px;margin-top:10px}\n.kloktion-popup-desc{color:#555;font-size:14px;margin:8px 0 10px}\n"},"result":null}
{"timestamp":"2026-05-25 06:48:27","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    \/\/ R12: Cloudflare Turnstile token storage. Populated by the data-callback on widget success.\n    window.kloktionTurnstileToken = '';\n\n    \/\/ Detect Turnstile by DOM widget presence, not window.turnstile global (which may be missing when CF JS is blocked\/slow).\n    function isTurnstileExpected() {\n        return !! document.querySelector( '.cf-turnstile.kloktion-turnstile' );\n    }\n\n    window.kloktionTurnstileCallback = function( token ) {\n        window.kloktionTurnstileToken = token || '';\n        \/\/ FIX G: re-enable Buy buttons that were held pending token capture \u2014 with 500ms grace period\n        \/\/ so a finger still on the button after turnstile.reset() cannot fire a double-submit.\n        setTimeout( function() {\n            document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn) {\n                btn.removeAttribute('data-kloktion-await-turnstile');\n                if ( btn.dataset.kloktionPendingActive === '1' ) {\n                    btn.disabled = false;\n                    btn.setAttribute('aria-busy', 'false');\n                    if ( btn.dataset.kloktionOrigText ) {\n                        btn.textContent = btn.dataset.kloktionOrigText;\n                        delete btn.dataset.kloktionOrigText;\n                    }\n                }\n            });\n        }, 500 );\n    };\n\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            var turnstileWrap = root ? root.querySelector('.kloktion-one-click__turnstile') : null;\n            if (turnstileWrap) { turnstileWrap.hidden = !active; }\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n\n            \/\/ FIX G (v2): guard by DOM widget presence so blocked\/slow CF JS still hard-disables Buy.\n            if (active && buyBtn) {\n                if ( isTurnstileExpected() && ! window.kloktionTurnstileToken ) {\n                    buyBtn.disabled = true;\n                    buyBtn.setAttribute('aria-busy', 'true');\n                    buyBtn.dataset.kloktionPendingActive = '1';\n                    buyBtn.dataset.kloktionAwaitTurnstile = '1';\n                    buyBtn.dataset.kloktionOrigText = buyBtn.textContent;\n                    buyBtn.textContent = 'Verifying...';\n                } else {\n                    buyBtn.disabled = false;\n                    buyBtn.dataset.kloktionPendingActive = '0';\n                }\n            } else if (!active && buyBtn) {\n                \/\/ FIX G: deactivating \u2014 clear the await flags and restore text.\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n                buyBtn.removeAttribute('aria-busy');\n                if ( buyBtn.dataset.kloktionOrigText ) {\n                    buyBtn.textContent = buyBtn.dataset.kloktionOrigText;\n                    delete buyBtn.dataset.kloktionOrigText;\n                }\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            \/\/ B3: reset Turnstile and hold all visible Buy buttons in pending state until callback fires.\n            function resetTurnstileAndPause() {\n                if ( typeof window.turnstile !== 'undefined' && typeof window.turnstile.reset === 'function' ) {\n                    try { window.turnstile.reset(); } catch(e) {}\n                }\n                window.kloktionTurnstileToken = '';\n                if ( ! isTurnstileExpected() ) { return; }\n                \/\/ Put every visible Buy button back to pending state - callback will re-enable.\n                document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn){\n                    if ( btn.hidden ) { return; }\n                    btn.disabled = true;\n                    btn.setAttribute('aria-busy', 'true');\n                    btn.dataset.kloktionPendingActive = '1';\n                    btn.dataset.kloktionAwaitTurnstile = '1';\n                    if ( ! btn.dataset.kloktionOrigText ) {\n                        btn.dataset.kloktionOrigText = btn.textContent;\n                    }\n                    btn.textContent = 'Verifying...';\n                });\n            }\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n                fd.append('cf_turnstile_token', window.kloktionTurnstileToken || ''); \/\/ R12\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            \/\/ B3: token is single-use \u2014 reset Turnstile and hold button until new token arrives.\n                            resetTurnstileAndPause();\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        \/\/ B3: network failure \u2014 reset Turnstile and hold button until new token arrives.\n                        resetTurnstileAndPause();\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        \/\/ Expose fireBuy on the container element so the delegated click handler can reach it.\n        if ( root ) { root._kloktionFireBuy = fireBuy; }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        \/\/ Direct Buy binding removed \u2014 handled by delegated listener below so dynamically\n        \/\/ injected Buy buttons (AJAX cart updates, variation reloads) also work.\n    });\n\n    \/\/ FIX 4: Delegated click handler for .kloktion-one-click__buy.\n    \/\/ Covers buttons present at init AND any injected later (AJAX \/ variation reloads).\n    document.addEventListener('click', function(e) {\n        var btn = e.target && e.target.closest ? e.target.closest('.kloktion-one-click__buy') : null;\n        if ( ! btn ) { return; }\n        if ( btn.hidden || btn.disabled ) { return; }\n        e.preventDefault();\n        \/\/ Walk up to find the matching slider container and call its fireBuy.\n        \/\/ Each slider instance stores fireBuy on the container via data attr for delegation.\n        var container = btn.closest('.kloktion-one-click');\n        if ( container && typeof container._kloktionFireBuy === 'function' ) {\n            container._kloktionFireBuy();\n        }\n    }, false);\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n    \/\/ FIX 3: 12-second Turnstile timeout \u2014 if widget is in DOM but no token arrives, show inline error.\n    if ( isTurnstileExpected() ) {\n        setTimeout( function() {\n            if ( ! window.kloktionTurnstileToken ) {\n                document.querySelectorAll('.kloktion-one-click__buy').forEach( function(btn) {\n                    if ( btn.dataset.kloktionAwaitTurnstile === '1' ) {\n                        btn.textContent = 'Verification timed out. Reload page.';\n                        btn.setAttribute('aria-busy', 'false');\n                    }\n                } );\n            }\n        }, 12000 );\n    }\n\n})();\n"},"result":null}
{"timestamp":"2026-05-25 06:48:27","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n        add_action( 'wp_enqueue_scripts', [ __CLASS__, 'enqueue_scripts' ] );\n    }\n\n    public static function enqueue_scripts(): void {\n        \\Kloktion\\Turnstile::enqueue_script(); \/\/ R12: bot protection\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        $turnstile_widget = \\Kloktion\\Turnstile::render_widget( 'kloktionTurnstileCallback' ); \/\/ R12: bot protection\n\n        \/\/ FIX J: if Turnstile is enabled, render Buy button disabled until the widget fires its callback.\n        $turnstile_enabled = \\Kloktion\\Turnstile::is_enabled();\n        $buy_extra_attrs   = $turnstile_enabled\n            ? ' disabled aria-busy=\"true\" data-kloktion-await-turnstile=\"1\"'\n            : '';\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        <div class=\"kloktion-one-click__turnstile\" hidden>%s<\/div>\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\"%s hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            $turnstile_widget, \/\/ R12: bot protection widget (already escaped inside render_widget)\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            $buy_extra_attrs, \/\/ FIX J: disabled+aria-busy+data-attr when Turnstile enabled\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        \/\/ R12: Cloudflare Turnstile bot challenge verification.\n        if ( \\Kloktion\\Turnstile::is_enabled() ) {\n            $cf_token = isset( $_POST['cf_turnstile_token'] ) ? sanitize_text_field( wp_unslash( $_POST['cf_turnstile_token'] ) ) : '';\n            if ( empty( $cf_token ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_missing', 'message' => __( 'Bot challenge missing. Please refresh the page.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n            $remote_ip = isset( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) : ( $_SERVER['REMOTE_ADDR'] ?? '' );\n            $check = \\Kloktion\\Turnstile::verify( $cf_token, (string) $remote_ip );\n            if ( empty( $check['success'] ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_failed', 'message' => __( 'Bot challenge failed. Please try again.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-05-25 06:48:28","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-05-25 06:48:29","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log","tail":20},"result":null}
{"timestamp":"2026-06-04 11:24:16","ip":"2a01:4f8:110:1444::2","action":"site_info","params":[],"result":null}
{"timestamp":"2026-06-04 11:24:32","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.7\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.7' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-06-04 11:24:33","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.7 - 2026-06-04 =\n* Fix: vendor products submitted with a \u20ac0 (or empty) start price no longer slip into the moderation queue \/ pending_review. The moderation interceptor now honours the start-price validation guard and hard-blocks the submission server-side, with a visible error on the vendor dashboard.\n* UX: Cloudflare Turnstile switched to interaction-only appearance and pre-solves on page load, so the bot challenge no longer adds any delay at the moment the buyer activates the toggle and clicks Buy Now. The widget stays visually invisible unless a genuine human challenge is required.\n\n= 3.4.6 - 2026-05-25 =\n* UX: Cloudflare Turnstile widget now appears together with the Buy Now button (after the user slides the activation toggle), instead of showing immediately on page load.\n* UX: Added a 16px breathing-room gap between the activation slider and the Turnstile widget (12px on mobile) so the two controls no longer sit flush against each other.\n\n= 3.4.5 - 2026-05-24 =\n* UX: Stronger visual separation between the activation slider and Buy Now button - 28px margin + 24px padding + 1px divider line, with higher CSS specificity so theme button rules cannot override the gap.\n* Feature: WP-Admin \"Put back on sale\" control on stuck pending_purchase lots. Cancels the pending order, clears the 96h reservation, restarts the auction from the original start price and duration. Reason dropdown (penalty unpaid \/ seller request \/ admin decision) records intent in the order note and Logger entry.\n* Feature: Dokan vendor product form now blocks save when Dutch Auction Start Price is missing or zero. Visible WooCommerce error notice on the server side plus a JS hint that highlights the field and focuses it on submit.\n* Feature: Dokan vendor product form hides the standard WooCommerce Regular\/Sale price fields and the entire Inventory section. Dutch Auction lots are unique and their price is derived from _kloktion_start_price - the extra fields only confused vendors.\n* Security: Cloudflare Turnstile integration on the one-click buy flow. Widget renders between the slider track and the Buy Now button. Token is verified server-side via siteverify before any pending_purchase is created. Fail-closed once the secret is set; fail-open by default until the operator enables it via wp_option kloktion_turnstile_secret.\n* DX: Added DESIGN.md baseline (Google design.md spec) at the repo root to lock in tokens for future UI changes.\n\n= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-06-04 11:24:33","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Dokan {\n\n    public static function init(): void {\n        if ( ! class_exists( 'WeDevs_Dokan' ) ) {\n            return;\n        }\n\n        add_action( 'dokan_new_product_after_product_tags', [ __CLASS__, 'vendor_product_fields' ] );\n        add_action( 'dokan_product_edit_after_product_tags', [ __CLASS__, 'vendor_product_fields' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'dokan_product_updated',   [ __CLASS__, 'validate_vendor_start_price' ], 1, 2 );\n        add_action( 'wp_head',                  [ __CLASS__, 'inject_vendor_dashboard_styles' ] );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'intercept_vendor_update_for_moderation' ], 5, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10, 2 );\n        add_action( 'dokan_new_product_added', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'dokan_product_updated', [ __CLASS__, 'force_auction_product_type' ], 9999 );\n        add_action( 'save_post_product', [ __CLASS__, 'force_auction_product_type' ], 999, 1 );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_dashboard_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'load_dashboard_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_payouts_menu' ] );\n        add_filter( 'dokan_query_var_filter', [ __CLASS__, 'register_payouts_query_var' ] );\n        add_action( 'dokan_load_custom_template', [ __CLASS__, 'render_payouts_template' ] );\n\n        add_filter( 'dokan_get_dashboard_nav', [ __CLASS__, 'add_exit_dashboard_nav' ], 99 );\n\n        \/\/ Fix B (R14-1): surface vendor-visible error notice after a failed submission.\n        add_action( 'dokan_dashboard_content_before', [ __CLASS__, 'show_vendor_error_notice' ] );\n        add_action( 'woocommerce_before_account_navigation', [ __CLASS__, 'show_vendor_error_notice' ] );\n\n        \/\/ Dokan blocks vendor's own products; allow dutch_auction\n        add_filter( 'woocommerce_is_purchasable', [ __CLASS__, 'allow_dutch_auction_purchase' ], 20, 2 );\n\n        \/\/ Dokan Lite hardcodes product_type='simple' in Products listing; include dutch_auction.\n        add_filter( 'dokan_product_types', [ __CLASS__, 'register_product_type' ] );\n        add_filter( 'dokan_product_listing_arg', [ __CLASS__, 'include_auctions_in_product_listing' ] );\n        add_action( 'init', [ __CLASS__, 'ensure_current_seller_enabled' ], 20 );\n    }\n\n    public static function vendor_product_fields( $post_id = null, $product = null ): void {\n        $product_id = 0;\n        if ( $product instanceof \\WC_Product ) {\n            $product_id = $product->get_id();\n        } elseif ( is_numeric( $post_id ) ) {\n            $product_id = (int) $post_id;\n        }\n\n        $start_price   = $product_id ? get_post_meta( $product_id, '_kloktion_start_price', true ) : '';\n        $reserve_price = $product_id ? get_post_meta( $product_id, '_kloktion_reserve_price', true ) : '';\n        $duration      = $product_id ? get_post_meta( $product_id, '_kloktion_duration', true ) : '';\n        $status        = $product_id ? Auction_Engine::get_status( $product_id ) : '';\n        $terms         = $product_id ? wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] ) : [];\n        $is_auction    = ! $product_id || in_array( 'dutch_auction', $terms, true );\n\n        \/\/ Lock auction fields once the auction has started (any non-empty, non-draft status).\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        $is_locked       = $product_id && in_array( $status, $locked_statuses, true );\n\n        \/\/ Render pending_review notice before the template.\n        if ( 'pending_review' === $status ) {\n            echo '<div style=\"background:#fff8e1;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#7a5800;\">'\n                . '&#9203; ' . esc_html__( 'Your update is pending admin approval. You\\'ll be notified by email once reviewed.', 'kloktion-dutch-auction' )\n                . '<\/div>';\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/product-fields.php';\n    }\n\n    \/**\n     * Intercept vendor product updates for moderation before save_vendor_product runs.\n     * Runs at priority 5, before save_vendor_product at priority 10.\n     *\n     * If moderation is enabled and the auction is in 'stopped' or 'pending_review' state,\n     * capture submitted data, queue it for review, set status to pending_review, and\n     * unhook save_vendor_product so it cannot overwrite the fields.\n     *\/\n    public static function intercept_vendor_update_for_moderation( $product_id, $data ): void {\n        global $wpdb;\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] intercept_vendor_update_for_moderation: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( empty( $settings['moderation_enabled'] ) ) {\n            return;\n        }\n\n        \/\/ Fix A (R14-1): hard-block if validate_vendor_start_price() (priority 1) flagged a failure.\n        \/\/ Must run BEFORE auction-signal detection and BEFORE any queue insert.\n        $user_id = get_current_user_id();\n        if ( $user_id && get_transient( 'kloktion_validation_fail_' . $user_id ) ) {\n            delete_transient( 'kloktion_validation_fail_' . $user_id );\n            \/\/ Store a visible error flag so the vendor sees why the submission did not go live.\n            set_transient( 'kloktion_vendor_error_' . $user_id, __( 'Start Price is required to create a Dutch Auction listing. Your submission was not saved.', 'kloktion-dutch-auction' ), 120 );\n            return; \/\/ Validation failed at priority 1 \u2014 do not queue this product for moderation.\n        }\n\n        $current_status = get_post_meta( $product_id, '_kloktion_status', true );\n\n        \/\/ Allow new products (empty _kloktion_status) only if this is a Dutch Auction.\n        \/\/ For existing products, only intercept when in 'stopped' or 'pending_review' state.\n        $is_new_product = ( '' === $current_status || false === $current_status );\n        if ( $is_new_product ) {\n            \/\/ Detect if this is a Dutch Auction submission before deciding to intercept.\n            $is_auction_signal = ! empty( $_POST['_kloktion_is_auction'] )\n                || ! empty( $data['_kloktion_is_auction'] )\n                || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n                || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n                || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n            if ( ! $is_auction_signal ) {\n                return; \/\/ Non-auction new product \u2014 skip.\n            }\n        } elseif ( ! in_array( $current_status, [ 'stopped', 'pending_review' ], true ) ) {\n            return; \/\/ Existing product not in a moderation-eligible state.\n        }\n\n        \/\/ Capture only our plugin fields from $data.\n        $kloktion_data = [];\n        foreach ( (array) $data as $key => $value ) {\n            if ( 0 === strpos( $key, '_kloktion_' ) ) {\n                $kloktion_data[ $key ] = $value;\n            }\n        }\n\n        \/\/ Upsert: if a pending row already exists for this product, reset it rather than duplicating.\n        $wpdb->query( $wpdb->prepare(\n            \"INSERT INTO {$wpdb->prefix}kloktion_moderation_queue\n             (product_id, vendor_id, submitted_data, submitted_at, status)\n             VALUES (%d, %d, %s, %s, 'pending')\n             ON DUPLICATE KEY UPDATE\n                vendor_id        = VALUES(vendor_id),\n                submitted_data   = VALUES(submitted_data),\n                submitted_at     = VALUES(submitted_at),\n                status           = 'pending',\n                reviewed_by      = NULL,\n                reviewed_at      = NULL,\n                rejection_reason = NULL\",\n            (int) $product_id,\n            (int) get_current_user_id(),\n            wp_json_encode( $kloktion_data ),\n            current_time( 'mysql' )\n        ) );\n\n        do_action( 'kloktion_moderation_submitted', $product_id, $data );\n\n        \/\/ CRITICAL: Persist auction meta + term BEFORE unhooking save_vendor_product.\n        \/\/ Otherwise Dokan's own save resets product_type to 'simple' and auction data is lost.\n        \/\/ Robust detection: accept checkbox, price field, or product_type signal.\n        $intercept_is_auction = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] )\n            || ( isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price'] )\n            || ( isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'] )\n            || ( 'dutch_auction' === ( $_POST['product_type'] ?? ( $data['product_type'] ?? '' ) ) );\n        if ( $intercept_is_auction ) {\n            \/\/ Force dutch_auction product type term.\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n            \/\/ Persist auction meta from $data (or $_POST fallback).\n            $meta_map = [\n                '_kloktion_is_auction',\n                '_kloktion_start_price',\n                '_kloktion_reserve_price',\n                '_kloktion_duration',\n                '_kloktion_start_date',\n                '_kloktion_start_time',\n                '_kloktion_start_timestamp',\n                '_kloktion_decay_curve',\n            ];\n            foreach ( $meta_map as $key ) {\n                $value = null;\n                if ( isset( $data[ $key ] ) ) {\n                    $value = $data[ $key ];\n                } elseif ( isset( $_POST[ $key ] ) ) {\n                    $value = wp_unslash( $_POST[ $key ] );\n                }\n                if ( $value !== null && $value !== '' ) {\n                    if ( in_array( $key, [ '_kloktion_start_price', '_kloktion_reserve_price' ], true ) ) {\n                        update_post_meta( $product_id, $key, (float) $value );\n                    } elseif ( in_array( $key, [ '_kloktion_duration', '_kloktion_start_timestamp' ], true ) ) {\n                        update_post_meta( $product_id, $key, absint( $value ) );\n                    } else {\n                        update_post_meta( $product_id, $key, sanitize_text_field( $value ) );\n                    }\n                }\n            }\n\n            \/\/ Ensure _kloktion_is_auction flag persists (used by force_auction_product_type detection).\n            update_post_meta( $product_id, '_kloktion_is_auction', '1' );\n\n            \/\/ Compute end_time if we have start_time + duration.\n            $start_ts = (int) get_post_meta( $product_id, '_kloktion_start_timestamp', true );\n            $duration = (int) get_post_meta( $product_id, '_kloktion_duration', true );\n            if ( $start_ts > 0 && $duration > 0 ) {\n                update_post_meta( $product_id, '_kloktion_end_time', $start_ts + $duration );\n            }\n        }\n\n        \/\/ Mark as pending_review AFTER meta is saved.\n        update_post_meta( $product_id, '_kloktion_status', 'pending_review' );\n\n        \/\/ Unhook save_vendor_product so it doesn't overwrite the pending_review state.\n        remove_action( 'dokan_product_updated', [ __CLASS__, 'save_vendor_product' ], 10 );\n        remove_action( 'dokan_new_product_added', [ __CLASS__, 'save_vendor_product' ], 10 );\n    }\n\n    public static function save_vendor_product( $product_id, $data ): void {\n        $user_id = get_current_user_id();\n        if ( $user_id && get_transient( 'kloktion_validation_fail_' . $user_id ) ) {\n            delete_transient( 'kloktion_validation_fail_' . $user_id );\n            return;\n        }\n\n        \/\/ Diagnostic log \u2014 helps trace #211 in production.\n        error_log( '[KLOKTION #211] save_vendor_product: post_id=' . $product_id\n            . ', POST_keys=' . json_encode( array_keys( (array) $_POST ) )\n            . ', data_keys=' . json_encode( array_keys( (array) $data ) ) );\n\n        \/\/ Robust auction detection: accept any of these signals\n        \/\/ (Dokan may strip or rename fields; presence of price\/type fields is enough).\n        $is_auction_posted = ! empty( $_POST['_kloktion_is_auction'] )\n            || ! empty( $data['_kloktion_is_auction'] );\n\n        $has_auction_price = isset( $_POST['_kloktion_start_price'] ) && '' !== $_POST['_kloktion_start_price']\n            || isset( $data['_kloktion_start_price'] ) && '' !== $data['_kloktion_start_price'];\n\n        \/\/ Check product_type field in POST (Dokan sends this as 'product_type' or inside $data)\n        $posted_type = $_POST['product_type'] ?? ( $data['product_type'] ?? '' );\n        $type_is_auction = ( 'dutch_auction' === $posted_type );\n\n        \/\/ Also accept if the existing term is already dutch_auction (locked auction re-save)\n        $existing_terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        $has_auction_term = ! is_wp_error( $existing_terms ) && in_array( 'dutch_auction', (array) $existing_terms, true );\n\n        $is_auction = $is_auction_posted || $has_auction_price || $type_is_auction || $has_auction_term;\n\n        if ( ! $is_auction ) {\n            return;\n        }\n\n        wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n\n        \/\/ If the auction has already started, vendors cannot change core auction fields.\n        $current_status  = get_post_meta( $product_id, '_kloktion_status', true );\n        $locked_statuses = [ 'active', 'paused', 'processing', 'scheduled', 'sold', 'expired', 'stopped', 'pending_review' ];\n        if ( in_array( $current_status, $locked_statuses, true ) ) {\n            return; \/\/ Auction fields are locked; title\/description\/images handled by Dokan core.\n        }\n\n        $raw_start     = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : ( isset( $data['_kloktion_start_price'] ) ? $data['_kloktion_start_price'] : '' );\n        $start_price   = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_start ) : floatval( $raw_start ) );\n        $no_reserve    = ! empty( $_POST['_kloktion_no_reserve'] ) || ! empty( $data['_kloktion_no_reserve'] );\n        $raw_reserve   = $no_reserve ? '' : ( isset( $_POST['_kloktion_reserve_price'] ) ? wp_unslash( $_POST['_kloktion_reserve_price'] ) : ( isset( $data['_kloktion_reserve_price'] ) ? $data['_kloktion_reserve_price'] : '' ) );\n        $reserve_price = $no_reserve ? 0 : (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw_reserve ) : floatval( $raw_reserve ) );\n        $duration      = isset( $_POST['_kloktion_duration'] ) ? absint( $_POST['_kloktion_duration'] ) : ( isset( $data['_kloktion_duration'] ) ? absint( $data['_kloktion_duration'] ) : 86400 );\n\n        if ( $start_price <= 0 ) {\n            return;\n        }\n        if ( ! $no_reserve && $reserve_price >= $start_price ) {\n            return;\n        }\n\n        update_post_meta( $product_id, '_kloktion_start_price', $start_price );\n        update_post_meta( $product_id, '_kloktion_reserve_price', $reserve_price );\n        update_post_meta( $product_id, '_kloktion_duration', $duration );\n        update_post_meta( $product_id, '_price', $start_price );\n        update_post_meta( $product_id, '_regular_price', $start_price );\n\n        $status = get_post_meta( $product_id, '_kloktion_status', true );\n        if ( ! $status ) {\n            $now = time();\n            update_post_meta( $product_id, '_kloktion_status', 'active' );\n            update_post_meta( $product_id, '_kloktion_start_time', $now );\n            update_post_meta( $product_id, '_kloktion_end_time', $now + $duration );\n            Logger::log( $product_id, 'active', $start_price, get_current_user_id() );\n        }\n    }\n\n    \/**\n     * Dokan sometimes has seller-role users without the selling flag after manual\n     * account creation\/import. Enable only missing values; explicit \"no\" stays no.\n     *\/\n    public static function ensure_current_seller_enabled(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n\n        $user = get_userdata( $user_id );\n        $roles = (array) $user->roles;\n        if ( ! $user || ( ! in_array( 'seller', $roles, true ) && ! in_array( 'administrator', $roles, true ) ) ) {\n            return;\n        }\n\n        $selling = get_user_meta( $user_id, 'dokan_enable_selling', true );\n        if ( '' === $selling ) {\n            update_user_meta( $user_id, 'dokan_enable_selling', 'yes' );\n        }\n    }\n\n    public static function add_dashboard_menu( $urls ): array {\n        $urls['kloktion-auctions'] = [\n            'title' => __( 'My Auctions', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-gavel\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-auctions' ),\n            'pos'   => 55,\n        ];\n\n        return $urls;\n    }\n\n    public static function register_query_var( $query_vars ): array {\n        $query_vars[] = 'kloktion-auctions';\n        return $query_vars;\n    }\n\n    public static function load_dashboard_template( $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-auctions'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/my-auctions.php';\n    }\n\n    \/**\n     * Register dutch_auction in Dokan's product type dropdown.\n     *\/\n    public static function register_product_type( array $types ): array {\n        $types['dutch_auction'] = __( 'Dutch Auction', 'kloktion-dutch-auction' );\n        return $types;\n    }\n\n    \/**\n     * Dokan Lite restricts Products listing to product_type='simple'.\n     * Modify the tax_query to also include 'dutch_auction'.\n     *\/\n    public static function include_auctions_in_product_listing( array $args ): array {\n        if ( empty( $args['tax_query'] ) || ! is_array( $args['tax_query'] ) ) {\n            return $args;\n        }\n\n        foreach ( $args['tax_query'] as &$clause ) {\n            if (\n                is_array( $clause )\n                && isset( $clause['taxonomy'], $clause['field'], $clause['terms'], $clause['operator'] )\n                && 'product_type' === $clause['taxonomy']\n                && 'slug' === $clause['field']\n                && 'IN' === $clause['operator']\n                && is_array( $clause['terms'] )\n                && in_array( 'simple', $clause['terms'], true )\n                && ! in_array( 'dutch_auction', $clause['terms'], true )\n            ) {\n                $clause['terms'][] = 'dutch_auction';\n            }\n        }\n        unset( $clause );\n\n        return $args;\n    }\n\n    public static function allow_dutch_auction_purchase( bool $purchasable, $product ): bool {\n        if ( ! $product instanceof Product_Type ) {\n            return $purchasable;\n        }\n        \/\/ If Dokan already marked it non-purchasable for own-product reason,\n        \/\/ re-check: guests should always be able to purchase, and\n        \/\/ non-author logged-in users should too.\n        if ( ! $purchasable && $product->get_status() === 'publish' ) {\n            $current_user = get_current_user_id();\n            if ( 0 === $current_user ) {\n                return true; \/\/ Guests can always see Add to Cart.\n            }\n            $author = absint( get_post_field( 'post_author', $product->get_id() ) );\n            if ( $author !== $current_user ) {\n                return true;\n            }\n        }\n        return $purchasable;\n    }\n\n    \/**\n     * Add \"Payouts\" menu item to Dokan vendor dashboard navigation.\n     *\/\n    public static function add_payouts_menu( array $urls ): array {\n        $urls['kloktion-payouts'] = [\n            'title' => __( 'Payouts', 'kloktion-dutch-auction' ),\n            'icon'  => '<i class=\"fas fa-credit-card\"><\/i>',\n            'url'   => dokan_get_navigation_url( 'kloktion-payouts' ),\n            'pos'   => 60,\n        ];\n\n        return $urls;\n    }\n\n    \/**\n     * Register kloktion-payouts as a Dokan query var.\n     *\/\n    public static function register_payouts_query_var( array $query_vars ): array {\n        $query_vars[] = 'kloktion-payouts';\n        return $query_vars;\n    }\n\n    \/**\n     * Render the Payouts \/ Stripe Connect template in the vendor dashboard.\n     *\n     * Integration note for class-stripe-connect.php:\n     *   ajax_start_onboarding() must compute URLs as:\n     *     $return_url  = dokan_get_navigation_url('kloktion-payouts') . '?stripe_return=1';\n     *     $refresh_url = dokan_get_navigation_url('kloktion-payouts');\n     *   This ensures the vendor lands back on this page after Stripe onboarding.\n     *\/\n    public static function render_payouts_template( array $query_vars ): void {\n        if ( ! isset( $query_vars['kloktion-payouts'] ) ) {\n            return;\n        }\n\n        $vendor_id = dokan_get_current_user_id();\n        if ( ! $vendor_id ) {\n            return;\n        }\n\n        $account_id  = get_user_meta( $vendor_id, '_stripe_connect_account_id', true );\n        $status      = get_user_meta( $vendor_id, '_stripe_connect_status', true );\n        $onboarded_at = get_user_meta( $vendor_id, '_stripe_connect_onboarded_at', true );\n\n        include KLOKTION_PLUGIN_DIR . 'templates\/dokan\/payouts.php';\n    }\n\n    \/**\n     * Force dutch_auction product type after any save that might reset it to 'simple'.\n     * Runs late (priority 9999\/999) so Dokan's internal save cannot override.\n     * Detects auction products via existing term, POST flag, or auction meta (covers locked auctions too).\n     *\/\n    public static function force_auction_product_type( int $product_id ): void {\n        if ( $product_id <= 0 ) {\n            return;\n        }\n        \/\/ Avoid running during initial WP import\/cron saves\n        if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {\n            return;\n        }\n        \/\/ Skip revisions\n        if ( wp_is_post_revision( $product_id ) ) {\n            return;\n        }\n\n        $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n        if ( is_wp_error( $terms ) ) {\n            return;\n        }\n\n        $has_auction_term = in_array( 'dutch_auction', (array) $terms, true );\n        $posted_auction   = ! empty( $_POST['_kloktion_is_auction'] );\n        $has_auction_meta = (bool) get_post_meta( $product_id, '_kloktion_start_price', true )\n                         || '1' === get_post_meta( $product_id, '_kloktion_is_auction', true );\n\n        $is_auction = $has_auction_term || $posted_auction || $has_auction_meta;\n\n        if ( $is_auction ) {\n            wp_set_object_terms( $product_id, 'dutch_auction', 'product_type' );\n            clean_post_cache( $product_id );\n        }\n    }\n\n    \/**\n     * R12: Block vendor save when Dutch Auction start price is missing.\n     * Sets a transient flag so save_vendor_product() can early-return.\n     * On dokan_new_product_added with invalid price, trashes the placeholder post.\n     *\n     * FIX A3: Guard against trashing normal (non-auction) products.\n     * If the vendor saves a regular simple product, _kloktion_start_price is empty\n     * and the old code would wp_trash_post() their legitimate product. The type check\n     * below ensures we only validate auction products.\n     *\/\n    public static function validate_vendor_start_price( $product_id, $data = [] ): void {\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        \/\/ Only validate when this is a Dutch Auction product.\n        $is_auction = false;\n        $product = function_exists( 'wc_get_product' ) ? wc_get_product( $product_id ) : null;\n        if ( $product && method_exists( $product, 'get_type' ) && 'dutch_auction' === $product->get_type() ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && ! empty( $_POST['_kloktion_is_auction'] ) ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $_POST['product_type'] ) && 'dutch_auction' === $_POST['product_type'] ) {\n            $is_auction = true;\n        }\n        if ( ! $is_auction && isset( $data['product_type'] ) && 'dutch_auction' === $data['product_type'] ) {\n            $is_auction = true;\n        }\n        \/\/ Marker meta from product_type registration \u2014 fallback.\n        if ( ! $is_auction ) {\n            $terms = wp_get_object_terms( $product_id, 'product_type', [ 'fields' => 'slugs' ] );\n            if ( is_array( $terms ) && in_array( 'dutch_auction', $terms, true ) ) {\n                $is_auction = true;\n            }\n        }\n        if ( ! $is_auction ) {\n            return; \/\/ Not an auction product \u2014 never validate or trash.\n        }\n\n        $raw   = isset( $_POST['_kloktion_start_price'] ) ? wp_unslash( $_POST['_kloktion_start_price'] ) : '';\n        $price = (float) ( function_exists( 'wc_format_decimal' ) ? wc_format_decimal( $raw ) : floatval( $raw ) );\n        if ( $price <= 0 ) {\n            if ( function_exists( 'wc_add_notice' ) ) {\n                wc_add_notice( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ), 'error' );\n            }\n            set_transient( 'kloktion_validation_fail_' . get_current_user_id(), 1, 60 );\n            \/\/ Trash the placeholder post only on new-product action (no prior status means it was just created).\n            if ( current_action() === 'dokan_new_product_added' && ! get_post_meta( $product_id, '_kloktion_status', true ) ) {\n                $trashed = wp_trash_post( $product_id );\n                if ( ! $trashed && class_exists( '\\\\Kloktion\\\\Logger' ) ) {\n                    \\Kloktion\\Logger::log( $product_id, 'vendor_invalid_product_trash_failed', null, get_current_user_id(), [\n                        'reason' => 'empty_start_price',\n                    ] );\n                }\n            }\n        }\n    }\n\n    \/**\n     * R12: Hide WC Regular\/Sale price + entire Inventory section from Dokan vendor product form.\n     * Dutch Auction lots are unique \u2014 inventory is irrelevant; price is derived from _kloktion_start_price.\n     *\/\n    public static function inject_vendor_dashboard_styles(): void {\n        if ( ! function_exists( 'dokan_is_seller_dashboard' ) || ! dokan_is_seller_dashboard() ) {\n            return;\n        }\n        echo '<style id=\"kloktion-dokan-hide-fields\">\n.dokan-dashboard ._regular_price_field,\n.dokan-dashboard ._sale_price_field,\n.dokan-dashboard .dokan-product-regular-price,\n.dokan-dashboard .dokan-product-less-price,\n.dokan-dashboard .dokan-price-container,\n.dokan-dashboard .dokan-product-inventory,\n.dokan-dashboard .dokan-inventory-container,\n.dokan-dashboard ._manage_stock_field,\n.dokan-dashboard ._stock_field,\n.dokan-dashboard ._stock_status_field,\n.dokan-dashboard ._backorders_field,\n.dokan-dashboard ._sold_individually_field,\n.dokan-dashboard .show_if_simple._sku_field,\n.dokan-dashboard .dokan-form-group.dokan-clearfix.show_if_simple,\n.dokan-dashboard .dokan-product-shipping-container,\n.dokan-dashboard #dokan-product-inventory,\n.dokan-dashboard .dokan-edit-row.content-half-part.dokan-clearfix.dokan-product-inventory { display: none !important; }\n<\/style>';\n    }\n\n    \/**\n     * Add \"Browse Shop\" link to the Dokan vendor sidebar so vendors can exit the dashboard.\n     *\/\n    public static function add_exit_dashboard_nav( array $nav ): array {\n        $nav['kloktion-exit'] = [\n            'title'      => __( 'Browse Shop', 'kloktion-dutch-auction' ),\n            'icon'       => '<i class=\"fas fa-store\"><\/i>',\n            'url'        => site_url( '\/shop\/' ),\n            'pos'        => 200,\n            'permission' => 'dokan_view_overview_menu',\n        ];\n        return $nav;\n    }\n\n    \/**\n     * Fix B (R14-1): Display a dismissible error notice on the Dokan vendor dashboard\n     * when a product submission was rejected due to a missing\/invalid start price.\n     * Hooked into dokan_dashboard_content_before (primary) and\n     * woocommerce_before_account_navigation (fallback).\n     *\/\n    public static function show_vendor_error_notice(): void {\n        $user_id = get_current_user_id();\n        if ( ! $user_id ) {\n            return;\n        }\n        $msg = get_transient( 'kloktion_vendor_error_' . $user_id );\n        if ( $msg ) {\n            delete_transient( 'kloktion_vendor_error_' . $user_id );\n            echo '<div class=\"dokan-alert dokan-alert-danger\" style=\"margin:12px 0;padding:12px;border:1px solid #dc3545;border-radius:4px;background:#fff5f5;color:#dc3545;\">'\n                . esc_html( $msg )\n                . '<\/div>';\n        }\n    }\n}\n"},"result":null}
{"timestamp":"2026-06-04 11:24:34","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php","content":"<?php\n\/**\n * Cloudflare Turnstile integration \u2014 Buy Now bot protection.\n *\n * Sitekey is public (committed). Secret lives in wp_option `kloktion_turnstile_secret`,\n * set on the live site via swissknife after deploy. If the option is empty,\n * Turnstile verification is skipped (fail-open at the gate, fail-closed once enabled).\n *\n * @package Kloktion\n *\/\n\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Turnstile {\n\n    const SITE_KEY      = '0x4AAAAAADVTH796CcB5MBVX';\n    const SCRIPT_HANDLE = 'cf-turnstile';\n    const VERIFY_URL    = 'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify';\n\n    \/**\n     * Is Turnstile enabled? Requires the secret option to be set on the live site.\n     *\/\n    public static function is_enabled(): bool {\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        return ! empty( $secret ) && ! empty( self::SITE_KEY );\n    }\n\n    \/**\n     * Enqueue the CF challenges API script. Idempotent.\n     *\/\n    public static function enqueue_script(): void {\n        if ( ! self::is_enabled() ) {\n            return;\n        }\n        if ( ! wp_script_is( self::SCRIPT_HANDLE, 'enqueued' ) ) {\n            wp_enqueue_script(\n                self::SCRIPT_HANDLE,\n                'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js',\n                [],\n                null,\n                [ 'in_footer' => true, 'strategy' => 'async' ]\n            );\n        }\n    }\n\n    \/**\n     * Render the Turnstile widget HTML. Output is safe to echo.\n     *\/\n    public static function render_widget( string $callback_name = 'kloktionTurnstileCallback' ): string {\n        if ( ! self::is_enabled() ) {\n            return '';\n        }\n        return sprintf(\n            '<div class=\"cf-turnstile kloktion-turnstile\" data-sitekey=\"%s\" data-callback=\"%s\" data-theme=\"auto\" data-size=\"flexible\" data-appearance=\"interaction-only\"><\/div>',\n            esc_attr( self::SITE_KEY ),\n            esc_attr( $callback_name )\n        );\n    }\n\n    \/**\n     * Verify a Turnstile token server-side.\n     *\n     * @return array{success:bool, error_codes?:array, message?:string}\n     *\/\n    public static function verify( string $token, string $remoteip = '' ): array {\n        if ( ! self::is_enabled() ) {\n            return [ 'success' => true, 'message' => 'turnstile_disabled' ];\n        }\n        if ( empty( $token ) ) {\n            return [ 'success' => false, 'message' => 'missing_token' ];\n        }\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        if ( empty( $secret ) ) {\n            return [ 'success' => true, 'message' => 'no_secret' ];\n        }\n        $body = [\n            'secret'   => $secret,\n            'response' => $token,\n        ];\n        if ( ! empty( $remoteip ) ) {\n            $body['remoteip'] = $remoteip;\n        }\n        $response = wp_remote_post(\n            self::VERIFY_URL,\n            [\n                'timeout'   => 6,\n                'body'      => $body,\n                'sslverify' => true,\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return [ 'success' => false, 'message' => 'request_failed: ' . $response->get_error_message() ];\n        }\n        $code = wp_remote_retrieve_response_code( $response );\n        if ( 200 !== $code ) {\n            return [ 'success' => false, 'message' => 'http_' . $code ];\n        }\n        $data = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! is_array( $data ) ) {\n            return [ 'success' => false, 'message' => 'invalid_response' ];\n        }\n        return [\n            'success'     => ! empty( $data['success'] ),\n            'error_codes' => isset( $data['error-codes'] ) ? (array) $data['error-codes'] : [],\n        ];\n    }\n}\n"},"result":null}
{"timestamp":"2026-06-04 11:24:34","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n        add_action( 'wp_enqueue_scripts', [ __CLASS__, 'enqueue_scripts' ] );\n    }\n\n    public static function enqueue_scripts(): void {\n        \\Kloktion\\Turnstile::enqueue_script(); \/\/ R12: bot protection\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        $turnstile_widget = \\Kloktion\\Turnstile::render_widget( 'kloktionTurnstileCallback' ); \/\/ R12: bot protection\n\n        \/\/ FIX J: if Turnstile is enabled, render Buy button disabled until the widget fires its callback.\n        $turnstile_enabled = \\Kloktion\\Turnstile::is_enabled();\n        $buy_extra_attrs   = $turnstile_enabled\n            ? ' disabled aria-busy=\"true\" data-kloktion-await-turnstile=\"1\"'\n            : '';\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        <div class=\"kloktion-one-click__turnstile\">%s<\/div>\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\"%s hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            $turnstile_widget, \/\/ R12: bot protection widget (already escaped inside render_widget)\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            $buy_extra_attrs, \/\/ FIX J: disabled+aria-busy+data-attr when Turnstile enabled\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        \/\/ R12: Cloudflare Turnstile bot challenge verification.\n        if ( \\Kloktion\\Turnstile::is_enabled() ) {\n            $cf_token = isset( $_POST['cf_turnstile_token'] ) ? sanitize_text_field( wp_unslash( $_POST['cf_turnstile_token'] ) ) : '';\n            if ( empty( $cf_token ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_missing', 'message' => __( 'Bot challenge missing. Please refresh the page.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n            $remote_ip = isset( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) : ( $_SERVER['REMOTE_ADDR'] ?? '' );\n            $check = \\Kloktion\\Turnstile::verify( $cf_token, (string) $remote_ip );\n            if ( empty( $check['success'] ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_failed', 'message' => __( 'Bot challenge failed. Please try again.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-06-04 11:24:35","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/templates\/dokan\/product-fields.php","content":"<?php defined( 'ABSPATH' ) || exit; ?>\n<div class=\"dokan-form-group kloktion-dokan-fields\">\n    <h3><?php esc_html_e( 'Dutch Auction Settings', 'kloktion-dutch-auction' ); ?><\/h3>\n\n    <input type=\"hidden\" name=\"_kloktion_is_auction\" value=\"1\">\n    <p class=\"dokan-text-left\" style=\"margin:0 0 10px;color:#555;\">\n        <?php esc_html_e( 'Dutch Auction mode is enabled by default and cannot be changed.', 'kloktion-dutch-auction' ); ?>\n    <\/p>\n\n    <?php if ( $is_locked ) : ?>\n        <div style=\"background:#fff3cd;border:1px solid #ffc107;border-radius:4px;padding:10px 14px;margin:10px 0;font-size:13px;color:#856404;\">\n            &#128274; <?php esc_html_e( 'Auction parameters are locked after the auction starts. You can still edit photos, title and description.', 'kloktion-dutch-auction' ); ?>\n        <\/div>\n        <style>\n            .kloktion-dokan-auction-fields input[disabled],\n            .kloktion-dokan-auction-fields select[disabled],\n            .kloktion-dokan-auction-fields textarea[disabled] {\n                background: #f0f0f0 !important;\n                color: #999 !important;\n                cursor: not-allowed !important;\n                opacity: 0.7 !important;\n                border-color: #ddd !important;\n            }\n        <\/style>\n    <?php endif; ?>\n\n    <div class=\"kloktion-dokan-auction-fields\">\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_start_price\"><?php esc_html_e( 'Start Price', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_start_price\" id=\"_kloktion_start_price\"\n                   value=\"<?php echo esc_attr( $start_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" required <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <?php $no_reserve = empty( $reserve_price ) || (float) $reserve_price <= 0; ?>\n        <div class=\"dokan-form-group\">\n            <label>\n                <input type=\"checkbox\" name=\"_kloktion_no_reserve\" value=\"1\" <?php checked( $no_reserve ); ?> id=\"_kloktion_no_reserve_dokan\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <?php esc_html_e( 'No Reserve (price can drop to zero)', 'kloktion-dutch-auction' ); ?>\n            <\/label>\n        <\/div>\n        <div class=\"dokan-form-group kloktion-dokan-reserve-field\" style=\"<?php echo $no_reserve ? 'display:none;' : ''; ?>\">\n            <label for=\"_kloktion_reserve_price\"><?php esc_html_e( 'Reserve Price (minimum)', 'kloktion-dutch-auction' ); ?><\/label>\n            <input type=\"number\" name=\"_kloktion_reserve_price\" id=\"_kloktion_reserve_price\"\n                   value=\"<?php echo esc_attr( $no_reserve ? '' : $reserve_price ); ?>\"\n                   class=\"dokan-form-control\" step=\"0.01\" min=\"0.01\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n        <\/div>\n        <div class=\"dokan-form-group\">\n            <label for=\"_kloktion_duration\"><?php esc_html_e( 'Auction Duration', 'kloktion-dutch-auction' ); ?><\/label>\n            <select name=\"_kloktion_duration\" id=\"_kloktion_duration\" class=\"dokan-form-control\" <?php echo $is_locked ? 'disabled' : ''; ?>>\n                <option value=\"259200\" <?php selected( $duration, 259200 ); ?>><?php esc_html_e( '3 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"432000\" <?php selected( $duration, 432000 ); ?>><?php esc_html_e( '5 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"604800\" <?php selected( $duration, 604800 ); ?>><?php esc_html_e( '7 days', 'kloktion-dutch-auction' ); ?><\/option>\n                <option value=\"864000\" <?php selected( $duration, 864000 ); ?>><?php esc_html_e( '10 days', 'kloktion-dutch-auction' ); ?><\/option>\n            <\/select>\n        <\/div>\n\n        <?php if ( $status ) : ?>\n        <div class=\"dokan-form-group\">\n            <label><?php esc_html_e( 'Current Status', 'kloktion-dutch-auction' ); ?><\/label>\n            <span class=\"dokan-label\"><?php echo esc_html( strtoupper( $status ) ); ?><\/span>\n        <\/div>\n        <?php endif; ?>\n    <\/div>\n<\/div>\n\n<script>\n(function() {\n    var nrCb = document.getElementById('_kloktion_no_reserve_dokan');\n    var rField = document.querySelector('.kloktion-dokan-reserve-field');\n    if (nrCb && rField && !nrCb.disabled) {\n        nrCb.addEventListener('change', function() {\n            rField.style.display = this.checked ? 'none' : '';\n            if (this.checked) document.getElementById('_kloktion_reserve_price').value = '';\n        });\n    }\n\n    var typeField = document.querySelector('[name=\"product_type\"]');\n    if (typeField) {\n        typeField.value = 'dutch_auction';\n        typeField.disabled = true;\n\n        var hiddenType = document.createElement('input');\n        hiddenType.type = 'hidden';\n        hiddenType.name = 'product_type';\n        hiddenType.value = 'dutch_auction';\n        typeField.parentNode.appendChild(hiddenType);\n\n        var wrapper = typeField.closest('.dokan-form-group') || typeField.closest('p');\n        if (wrapper) wrapper.style.display = 'none';\n    }\n})();\n<\/script>\n\n<style>.kloktion-field-error { border-color: #dc3545 !important; }<\/style>\n<script>\n(function() {\n    document.addEventListener( 'DOMContentLoaded', function() {\n        var priceField = document.getElementById( '_kloktion_start_price' );\n        if ( ! priceField ) { return; }\n\n        \/\/ B5: clear error only when value becomes valid (not on every keystroke).\n        priceField.addEventListener( 'input', function() {\n            if ( parseFloat( priceField.value ) > 0 ) {\n                priceField.classList.remove( 'kloktion-field-error' );\n                var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                if ( errDiv ) { errDiv.remove(); }\n            }\n        } );\n\n        \/\/ B5: also handle paste \u2014 value isn't yet updated when paste fires, use setTimeout 0.\n        priceField.addEventListener( 'paste', function() {\n            setTimeout( function() {\n                if ( parseFloat( priceField.value ) > 0 ) {\n                    priceField.classList.remove( 'kloktion-field-error' );\n                    var errDiv = document.getElementById( 'kloktion-start-price-error' );\n                    if ( errDiv ) { errDiv.remove(); }\n                }\n            }, 0 );\n        } );\n\n        \/\/ B4: shared intercept function used by both click delegation and form-submit fallback.\n        function intercept( e ) {\n            var value = parseFloat( priceField.value );\n            if ( ! value || value <= 0 ) {\n                e.preventDefault();\n                e.stopPropagation();\n                e.stopImmediatePropagation();\n                priceField.classList.add( 'kloktion-field-error' );\n                priceField.focus();\n                if ( ! document.getElementById( 'kloktion-start-price-error' ) ) {\n                    var err = document.createElement( 'div' );\n                    err.id = 'kloktion-start-price-error';\n                    err.style.color = '#dc3545';\n                    err.style.marginTop = '6px';\n                    err.style.fontSize = '13px';\n                    err.textContent = <?php echo wp_json_encode( __( 'Start Price is required to create a Dutch Auction listing.', 'kloktion-dutch-auction' ) ); ?>;\n                    priceField.parentNode.appendChild( err );\n                }\n                return false;\n            }\n        }\n\n        \/\/ B4: Dokan intercepts Save via XHR without triggering form.submit().\n        \/\/ Bind to save button click with capture so we run before Dokan's handler.\n        document.addEventListener( 'click', function( e ) {\n            var t = e.target;\n            if ( ! t ) { return; }\n            var el = t.closest ? t.closest( 'button, input[type=submit]' ) : null;\n            if ( ! el ) { return; }\n            var isDokanSave = el.matches(\n                '.dokan-btn-theme, [name=\"dokan_update_product\"], [name=\"add_product\"], #publish, .dokan-edit-product-form button[type=submit], .dokan-btn, [name=\"dokan_add_product\"], #dokan-edit-product-form button[type=submit], .dokan-product-edit-form button[type=submit], button.dokan-btn-theme.dokan-btn-success, input#publish'\n            );\n            if ( isDokanSave ) {\n                intercept( e );\n            }\n        }, true );\n\n        \/\/ B4: also keep form-submit fallback for vanilla HTML5 submits.\n        var form = document.querySelector( 'form.dokan-product-edit-form, form#dokan-add-product-form, form.dokan-new-product-form' );\n        if ( form ) {\n            form.addEventListener( 'submit', intercept, true );\n        }\n    } );\n})();\n<\/script>\n"},"result":null}
{"timestamp":"2026-06-04 11:24:36","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    \/\/ R12: Cloudflare Turnstile token storage. Populated by the data-callback on widget success.\n    window.kloktionTurnstileToken = '';\n\n    \/\/ Detect Turnstile by DOM widget presence, not window.turnstile global (which may be missing when CF JS is blocked\/slow).\n    function isTurnstileExpected() {\n        return !! document.querySelector( '.cf-turnstile.kloktion-turnstile' );\n    }\n\n    window.kloktionTurnstileCallback = function( token ) {\n        window.kloktionTurnstileToken = token || '';\n        \/\/ FIX G: re-enable Buy buttons that were held pending token capture \u2014 with 500ms grace period\n        \/\/ so a finger still on the button after turnstile.reset() cannot fire a double-submit.\n        setTimeout( function() {\n            document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn) {\n                btn.removeAttribute('data-kloktion-await-turnstile');\n                if ( btn.dataset.kloktionPendingActive === '1' ) {\n                    btn.disabled = false;\n                    btn.setAttribute('aria-busy', 'false');\n                    if ( btn.dataset.kloktionOrigText ) {\n                        btn.textContent = btn.dataset.kloktionOrigText;\n                        delete btn.dataset.kloktionOrigText;\n                    }\n                }\n            });\n        }, 500 );\n    };\n\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            \/\/ R14-2: wrapper is no longer toggled hidden \u2014 interaction-only appearance manages\n            \/\/ its own visibility. The widget pre-solves on page load; hiding the wrapper\n            \/\/ here would move the CF iframe out of flow and could invalidate the token.\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n\n            \/\/ FIX G (v2): guard by DOM widget presence so blocked\/slow CF JS still hard-disables Buy.\n            if (active && buyBtn) {\n                if ( isTurnstileExpected() && ! window.kloktionTurnstileToken ) {\n                    buyBtn.disabled = true;\n                    buyBtn.setAttribute('aria-busy', 'true');\n                    buyBtn.dataset.kloktionPendingActive = '1';\n                    buyBtn.dataset.kloktionAwaitTurnstile = '1';\n                    buyBtn.dataset.kloktionOrigText = buyBtn.textContent;\n                    buyBtn.textContent = 'Verifying...';\n                } else {\n                    buyBtn.disabled = false;\n                    buyBtn.dataset.kloktionPendingActive = '0';\n                }\n            } else if (!active && buyBtn) {\n                \/\/ FIX G: deactivating \u2014 clear the await flags and restore text.\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n                buyBtn.removeAttribute('aria-busy');\n                if ( buyBtn.dataset.kloktionOrigText ) {\n                    buyBtn.textContent = buyBtn.dataset.kloktionOrigText;\n                    delete buyBtn.dataset.kloktionOrigText;\n                }\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            \/\/ B3: reset Turnstile and hold all visible Buy buttons in pending state until callback fires.\n            function resetTurnstileAndPause() {\n                if ( typeof window.turnstile !== 'undefined' && typeof window.turnstile.reset === 'function' ) {\n                    try { window.turnstile.reset(); } catch(e) {}\n                }\n                window.kloktionTurnstileToken = '';\n                if ( ! isTurnstileExpected() ) { return; }\n                \/\/ Put every visible Buy button back to pending state - callback will re-enable.\n                document.querySelectorAll('.kloktion-one-click__buy').forEach(function(btn){\n                    if ( btn.hidden ) { return; }\n                    btn.disabled = true;\n                    btn.setAttribute('aria-busy', 'true');\n                    btn.dataset.kloktionPendingActive = '1';\n                    btn.dataset.kloktionAwaitTurnstile = '1';\n                    if ( ! btn.dataset.kloktionOrigText ) {\n                        btn.dataset.kloktionOrigText = btn.textContent;\n                    }\n                    btn.textContent = 'Verifying...';\n                });\n            }\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n                fd.append('cf_turnstile_token', window.kloktionTurnstileToken || ''); \/\/ R12\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            \/\/ B3: token is single-use \u2014 reset Turnstile and hold button until new token arrives.\n                            resetTurnstileAndPause();\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        \/\/ B3: network failure \u2014 reset Turnstile and hold button until new token arrives.\n                        resetTurnstileAndPause();\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        \/\/ Expose fireBuy on the container element so the delegated click handler can reach it.\n        if ( root ) { root._kloktionFireBuy = fireBuy; }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        \/\/ Direct Buy binding removed \u2014 handled by delegated listener below so dynamically\n        \/\/ injected Buy buttons (AJAX cart updates, variation reloads) also work.\n    });\n\n    \/\/ FIX 4: Delegated click handler for .kloktion-one-click__buy.\n    \/\/ Covers buttons present at init AND any injected later (AJAX \/ variation reloads).\n    document.addEventListener('click', function(e) {\n        var btn = e.target && e.target.closest ? e.target.closest('.kloktion-one-click__buy') : null;\n        if ( ! btn ) { return; }\n        if ( btn.hidden || btn.disabled ) { return; }\n        e.preventDefault();\n        \/\/ Walk up to find the matching slider container and call its fireBuy.\n        \/\/ Each slider instance stores fireBuy on the container via data attr for delegation.\n        var container = btn.closest('.kloktion-one-click');\n        if ( container && typeof container._kloktionFireBuy === 'function' ) {\n            container._kloktionFireBuy();\n        }\n    }, false);\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n    \/\/ FIX 3: 12-second Turnstile timeout \u2014 if widget is in DOM but no token arrives, show inline error.\n    if ( isTurnstileExpected() ) {\n        setTimeout( function() {\n            if ( ! window.kloktionTurnstileToken ) {\n                document.querySelectorAll('.kloktion-one-click__buy').forEach( function(btn) {\n                    if ( btn.dataset.kloktionAwaitTurnstile === '1' ) {\n                        btn.textContent = 'Verification timed out. Reload page.';\n                        btn.setAttribute('aria-busy', 'false');\n                    }\n                } );\n            }\n        }, 12000 );\n    }\n\n})();\n"},"result":null}
{"timestamp":"2026-06-04 11:24:36","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-06-04 11:24:37","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log","tail":15},"result":null}
{"timestamp":"2026-06-04 11:24:37","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php"},"result":null}
{"timestamp":"2026-06-04 11:24:38","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-dokan.php"},"result":null}
{"timestamp":"2026-06-04 11:30:59","ip":"2a01:4f8:110:1444::2","action":"db_query","params":["SELECT p.ID, p.post_title, pm.meta_value AS status FROM mod494_posts p JOIN mod494_postmeta pm ON p.ID=pm.post_id WHERE p.post_type=\"product\" AND pm.meta_key=\"_kloktion_status\" ORDER BY p.ID DESC LIMIT 15"],"result":null}
{"timestamp":"2026-06-04 11:31:22","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_qa_reactivate.php","content":"<?php\n$ip = $_SERVER['HTTP_CF_CONNECTING_IP'] ?? $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'] ?? '';\nif ( ! in_array( trim( explode(',', $ip)[0] ), ['78.46.49.27','2a01:4f8:110:1444::2'], true ) ) { http_response_code(403); exit('ip'); }\nif ( ( $_GET['t'] ?? '' ) !== '1ec640dc6dc7590882200e12' ) { http_response_code(403); exit('tok'); }\nrequire_once dirname(__DIR__, 3) . '\/wp-load.php';\n$pid = 190;\n$now = time();\n$sp = (float) get_post_meta($pid, '_kloktion_start_price', true);\nif ($sp <= 0) { $sp = 10000; update_post_meta($pid, '_kloktion_start_price', $sp); }\nupdate_post_meta($pid, '_kloktion_status', 'active');\nupdate_post_meta($pid, '_kloktion_start_time', $now - 120);\nupdate_post_meta($pid, '_kloktion_end_time', $now + 7*86400);\nupdate_post_meta($pid, '_kloktion_current_price', $sp);\nupdate_post_meta($pid, '_price', $sp);\necho json_encode(['ok'=>true,'pid'=>$pid,'status'=>get_post_meta($pid,'_kloktion_status',true),'start_price'=>$sp,'end'=>date('c',$now+7*86400)]);\n"},"result":null}
{"timestamp":"2026-06-04 11:31:23","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_qa_reactivate.php","content":"<?php exit;"},"result":null}
{"timestamp":"2026-06-04 12:24:24","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_qa_pending.php","content":"<?php\n$ip = $_SERVER['HTTP_CF_CONNECTING_IP'] ?? $_SERVER['HTTP_X_FORWARDED_FOR'] ?? $_SERVER['REMOTE_ADDR'] ?? '';\nif ( ! in_array( trim( explode(',', $ip)[0] ), ['78.46.49.27','2a01:4f8:110:1444::2'], true ) ) { http_response_code(403); exit('ip'); }\nif ( ( $_GET['t'] ?? '' ) !== 'a6db63fc06377189c2b45c02' ) { http_response_code(403); exit('tok'); }\nrequire_once dirname(__DIR__, 3) . '\/wp-load.php';\n$pid = 188;\n$now = time();\n$sp = (float) get_post_meta($pid,'_kloktion_start_price',true); if($sp<=0){$sp=5000;update_post_meta($pid,'_kloktion_start_price',$sp);}\nupdate_post_meta($pid,'_kloktion_status','pending_purchase');\nupdate_post_meta($pid,'_kloktion_pending_user',11);\nupdate_post_meta($pid,'_kloktion_pending_order',0);\nupdate_post_meta($pid,'_kloktion_pending_price',$sp*0.8);\nupdate_post_meta($pid,'_kloktion_payment_deadline',$now + 96*3600);\necho json_encode(['ok'=>true,'pid'=>$pid,'status'=>get_post_meta($pid,'_kloktion_status',true),'deadline'=>date('c',$now+96*3600),'edit_url'=>admin_url('post.php?post='.$pid.'&action=edit')]);\n"},"result":null}
{"timestamp":"2026-06-04 12:24:26","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/_qa_pending.php","content":"<?php exit;"},"result":null}
{"timestamp":"2026-06-04 12:49:10","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/kloktion-dutch-auction.php","content":"<?php\n\/**\n * Plugin Name: Kloktion Dutch Auction\n * Plugin URI:  https:\/\/kloktion.com\n * Description: Dutch Auction (reverse auction) platform for WooCommerce + Dokan marketplace.\n * Version:     3.4.8\n * Author:      LeoWebMarketing\n * Author URI:  https:\/\/leowebmarketing.com\n * License:     GPL-2.0-or-later\n * Text Domain: kloktion-dutch-auction\n * Domain Path: \/languages\n * Requires at least: 6.0\n * Requires PHP: 8.0\n * WC requires at least: 8.0\n * WC tested up to: 10.5\n *\/\n\ndefined( 'ABSPATH' ) || exit;\n\ndefine( 'KLOKTION_VERSION', '3.4.8' );\ndefine( 'KLOKTION_PLUGIN_FILE', __FILE__ );\ndefine( 'KLOKTION_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_URL', plugin_dir_url( __FILE__ ) );\ndefine( 'KLOKTION_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );\n\nspl_autoload_register( function ( $class ) {\n    $prefix    = 'Kloktion\\\\';\n    $base_dir  = KLOKTION_PLUGIN_DIR . 'includes\/';\n\n    if ( strpos( $class, $prefix ) !== 0 ) {\n        return;\n    }\n\n    $relative = substr( $class, strlen( $prefix ) );\n    $file     = $base_dir . 'class-' . strtolower( str_replace( [ '\\\\', '_' ], [ '\/', '-' ], $relative ) ) . '.php';\n\n    if ( file_exists( $file ) ) {\n        require_once $file;\n    }\n} );\n\nfunction kloktion_check_requirements() {\n    if ( ! class_exists( 'WooCommerce' ) ) {\n        add_action( 'admin_notices', function () {\n            echo '<div class=\"error\"><p><strong>Kloktion Dutch Auction<\/strong> requires WooCommerce to be installed and active.<\/p><\/div>';\n        } );\n        return false;\n    }\n    return true;\n}\n\nregister_activation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::activate();\n} );\n\nregister_deactivation_hook( __FILE__, function () {\n    require_once KLOKTION_PLUGIN_DIR . 'includes\/class-installer.php';\n    \\Kloktion\\Installer::deactivate();\n} );\n\nadd_action( 'plugins_loaded', function () {\n    if ( ! kloktion_check_requirements() ) {\n        return;\n    }\n    \\Kloktion\\Plugin::instance();\n}, 20 );\n\nadd_action( 'before_woocommerce_init', function () {\n    if ( class_exists( '\\Automattic\\WooCommerce\\Utilities\\FeaturesUtil' ) ) {\n        \\Automattic\\WooCommerce\\Utilities\\FeaturesUtil::declare_compatibility( 'custom_order_tables', __FILE__, true );\n    }\n} );\n"},"result":null}
{"timestamp":"2026-06-04 12:49:10","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/changelog.txt","content":"= 3.4.8 - 2026-06-04 =\n* UX\/Security: Cloudflare Turnstile moved to execute-on-demand mode. The challenge no longer renders on page load or at toggle activation - it runs only when the buyer clicks Buy Now. For legitimate users the token is fetched silently in milliseconds; only flagged sessions ever see a challenge, and only at the moment of purchase. Removes the visible checkbox that appeared on the auction page (notably for VPN\/data-center sessions). Token is reset after each attempt. Full invisible edge bot-management will follow once the domain is moved onto Cloudflare.\n\n= 3.4.7 - 2026-06-04 =\n* Fix: vendor products submitted with a \u20ac0 (or empty) start price no longer slip into the moderation queue \/ pending_review. The moderation interceptor now honours the start-price validation guard and hard-blocks the submission server-side, with a visible error on the vendor dashboard.\n* UX: Cloudflare Turnstile switched to interaction-only appearance and pre-solves on page load, so the bot challenge no longer adds any delay at the moment the buyer activates the toggle and clicks Buy Now. The widget stays visually invisible unless a genuine human challenge is required.\n\n= 3.4.6 - 2026-05-25 =\n* UX: Cloudflare Turnstile widget now appears together with the Buy Now button (after the user slides the activation toggle), instead of showing immediately on page load.\n* UX: Added a 16px breathing-room gap between the activation slider and the Turnstile widget (12px on mobile) so the two controls no longer sit flush against each other.\n\n= 3.4.5 - 2026-05-24 =\n* UX: Stronger visual separation between the activation slider and Buy Now button - 28px margin + 24px padding + 1px divider line, with higher CSS specificity so theme button rules cannot override the gap.\n* Feature: WP-Admin \"Put back on sale\" control on stuck pending_purchase lots. Cancels the pending order, clears the 96h reservation, restarts the auction from the original start price and duration. Reason dropdown (penalty unpaid \/ seller request \/ admin decision) records intent in the order note and Logger entry.\n* Feature: Dokan vendor product form now blocks save when Dutch Auction Start Price is missing or zero. Visible WooCommerce error notice on the server side plus a JS hint that highlights the field and focuses it on submit.\n* Feature: Dokan vendor product form hides the standard WooCommerce Regular\/Sale price fields and the entire Inventory section. Dutch Auction lots are unique and their price is derived from _kloktion_start_price - the extra fields only confused vendors.\n* Security: Cloudflare Turnstile integration on the one-click buy flow. Widget renders between the slider track and the Buy Now button. Token is verified server-side via siteverify before any pending_purchase is created. Fail-closed once the secret is set; fail-open by default until the operator enables it via wp_option kloktion_turnstile_secret.\n* DX: Added DESIGN.md baseline (Google design.md spec) at the repo root to lock in tokens for future UI changes.\n\n= 3.4.4 - 2026-05-14 =\n* UX: vertical gap between Active toggle and Buy Now button increased from 10px to 18px for clearer visual separation.\n* Fix: Dokan auto-enable now applies to administrator role in addition to seller role, so the site owner can use the vendor dashboard without manual flag setup.\n\n= 3.4.3 - 2026-05-11 =\n* Fix #336: Slider toggle now supports drag-back from Active to Deactivated. pointerdown captures startActive snapshot; pointermove clamps in the correct direction depending on starting state; pointerup checks threshold against a negative delta when dragging left. snapBack now repositions to the correct edge (right when active, left when inactive).\n* Fix #337 (mu-plugin): Coming Soon gate now bypasses for Dokan vendors (role \"seller\") in addition to admins and edit_posts users. Also bypasses for any logged-in user accessing \/dashboard\/* as a safety net for sellers with incomplete role flags.\n\n= 3.4.2 - 2026-05-09 =\n* UX: Reworked the one-click purchase control into a two-step safety flow. Buyers now see \"Switch to Active to participate\", slide from Deactivated to Active, and only then see the separate \"Buy Now\" button.\n* UX: Buy Now now reserves the lot for a 96-hour payment window instead of treating the slide itself as the purchase action.\n* Backend: Added pending_purchase auction state with pending buyer\/order\/price\/deadline metadata, REST output, product display handling, and payment completion validation.\n* Fix: Unverified-account card banner is now hidden for admins, WooCommerce managers, and Dokan sellers; it remains buyer-facing only.\n* Fix: Dokan vendor products now default to Dutch Auction mode, show auction fields immediately, and no longer expose a vendor checkbox to disable auction mode.\n* Fix: Seller-role users with a missing Dokan selling flag are enabled automatically; explicit admin-disabled sellers remain disabled.\n\n= 3.4.1 - 2026-05-06 =\n* Fix #330: Removed padlock toggle UI - the slide gesture itself is now the only gate. Padlock markup, JS handler, and all related CSS removed.\n* Fix #331: Slider thumb now starts at the LEFT edge of the track (52x52 purple button). Label text stays fixed in the track center. Only the thumb translates on drag.\n* Fix #332: Track background changed from black (#1a1a1a) to light gray (rgba(0,0,0,0.06)) with rounded corners. Thumb uses brand purple (#5d2da3). Label text is dark gray (#333) for legibility on the light background.\n\n= 3.4.0 - 2026-05-06 =\n* UX: One-click buy button replaced with swipe-to-confirm slider (padlock unlock + drag-right gesture) to prevent accidental purchases on touch devices.\n* UX: Consent label in My Wallet updated to plainly state the 5% per week late-payment penalty so buyers understand the terms before saving a card.\n* Fix: Alert banner (render_alert_banner) now returns early on Dokan seller dashboard pages, preventing the unverified-account banner from overlapping vendor UI.\n* Security: Honeypot field (kloktion_website_url) added to the one-click buy form, My Wallet card form, and all three protected REST routes (setup-intent, card\/attach) to silently reject automated bot submissions.\n\n= 3.3.9 \u2014 2026-04-27 =\n* Fix: Approved vendor auctions with no start date now activate immediately (previously stuck SCHEDULED forever because cron requires start_time > 0).\n* Fix: Approved auctions explicitly set catalog_visibility='visible' so they appear on \/shop even when re-approved after being stopped\/expired.\n* Fix: Rejected vendor submissions now move post_status from 'pending' to 'draft' so the vendor can find and edit them in their Dokan products list (previously invisible everywhere).\n* Fix: Approve handler ignores _kloktion_status from submitted_data and normalizes _kloktion_is_auction to '1' (was 'yes', breaking strict-compare in force_auction_product_type).\n* Fix: Approving a stale queue row for a product that already sold\/expired now returns an error and cleans up the orphan row instead of silently overwriting meta.\n* UX: Vendor dashboard now surfaces pending-review submissions; pending_review status displays as \"AWAITING REVIEW\" badge instead of raw text.\n\n= 3.3.8 \u2014 2026-04-27 =\n* Fix #248: Approving an auction in Moderation Queue now correctly publishes it to \/shop and updates vendor dashboard status. Root cause: ajax_moderation_approve() never called wp_update_post to flip post_status from 'pending' to 'publish' after approval \u2014 transition_status() updated _kloktion_status correctly but WooCommerce shop and Dokan vendor dashboard both filter by post_status='publish', so the product was invisible in both places. Also hardened the flow by forcing _kloktion_status='pending_review' before transitioning, so the valid_transitions table always has a matching entry regardless of what submitted_data contained.\n\n= 3.3.7 \u2014 2026-04-26 =\n* Fix #229: Smart card popup \"Add your card to bid\" now waits for Stripe.js to load (50\u00d7 \u00d7 100ms retry) before showing the input field \u2014 previously empty if user clicked Buy Now before Stripe.js finished loading.\n\n= 3.3.6 - 2026-04-27 =\n* Fix (BLOCKER) #226 round 6: Stripe Transfer amount exceeds source \u2014 when buyer pays in USD and platform settles in EUR, transfer_amount_cents was computed from the original USD price (e.g. 9995 cents) and rejected by Stripe (only \u20ac84.95 = 8495 EUR cents available). release_escrow() now detects cross-currency (charge.currency != balance_transaction.currency), uses balance_transaction.net (EUR cents net of Stripe fees) as the settlement cap, and deducts platform commission proportionally. Same-currency path unchanged.\n* Fix (BLOCKER) #230 round 6: Invoice button missing on Auction Purchases for orders predating v3.3.0 \u2014 issue_invoice() only fires on order status transitions, so older orders never had _kloktion_invoice_number meta. Template now calls Invoice::issue_invoice() on-demand before rendering each row, generating numbers for legacy orders idempotently.\n* Fix (BLOCKER) round 6: Newly created vendor auctions did not appear in admin Moderation Queue \u2014 intercept_vendor_update_for_moderation() returned early when _kloktion_status was empty (new product). Now detects new-product creation and proceeds with queue insert when Dutch Auction signals are present.\n\n= 3.3.5 - 2026-04-22 =\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch \u2014 now fetches charge with expanded balance_transaction and uses balance_transaction.currency (platform settlement currency, e.g. EUR) instead of charge.currency (buyer presentation currency, e.g. USD). Resolves \"source_transaction balance transaction currency (eur) must match transfer currency (usd)\" error on EU Stripe accounts.\n* Fix (BLOCKER) #211: Dutch Auction meta not persisted on Dokan vendor save \u2014 save_vendor_product now detects auction products via multiple signals (checkbox, start_price field, product_type field, existing term) instead of requiring _kloktion_is_auction strictly in $_POST. Added error_log diagnostics for both intercept and save functions. intercept_vendor_update_for_moderation also uses same multi-signal detection.\n* Fix (BLOCKER) #209: Payouts page content hidden behind sidebar \u2014 aligned payouts.php outer structure with my-auctions.php: moved dokan_dashboard_content_before hook outside .dokan-dashboard-content div, added dokan_dashboard_content_inside_before\/after hooks, added dokan-payouts-listing class to content wrapper.\n\n= 3.3.4 - 2026-04-24 =\n* Fix #209: Alert banner on Dokan vendor dashboard \u2014 changed from sticky+z-index:99999 to relative+inline flow. Previous v3.3.3 fix made banner overlap Dokan's sidebar Kloktion logo. Now banner pushes dashboard content down naturally without covering sidebar.\n\n= 3.3.3 - 2026-04-24 =\n* Fix (BLOCKER) #211: Dutch Auction product type now persists on FIRST save via Vendor Dashboard (previously required second save). Added force_auction_product_type hook to dokan_new_product_added at priority 9999, raised existing dokan_product_updated priority to 9999 too.\n* Fix (BLOCKER) #226: Stripe Transfer currency mismatch resolved \u2014 we now fetch the actual charge currency via Stripe API before creating the transfer (was \"source_transaction currency EUR must match transfer currency USD\"). Also added guard for empty stripe_account_id returning clear WP_Error instead of raw Stripe failure.\n* Fix #209: Kloktion alert banner (\"Unverified account...\") now renders correctly on Dokan vendor dashboard \u2014 frontend.css enqueue extended to dokan_is_seller_dashboard pages + z-index raised to 99999 with sticky positioning and Dokan-specific overrides.\n* Refactor: REST escrow confirm endpoint now propagates WP_Error status codes instead of hardcoding 400.\n\n= 3.3.2 - 2026-04-24 =\n* Fix: Stripe.js double-load warning in My Wallet page (removed raw script tag, now enqueued via wp_enqueue_script on account pages)\n* Fix: Invoice number counter now atomic via MySQL UPDATE+1 to prevent duplicate invoice numbers under concurrent orders\n\n= 3.3.1 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211\/#228: Dutch Auction product type persistence \u2014 moderation intercept now writes auction meta + dutch_auction term BEFORE unhooking save_vendor_product (Dokan's internal save was resetting it to 'simple')\n* Fix (C3 BLOCKER) #226: \"Confirm Delivery\" critical error fixed \u2014 PHP 8+ ArgumentCountError on 'is_numeric' validate_callback replaced with wrapper method that accepts 3 args\n* Fix (C3) #229: Inline Stripe card popup now mounts Elements correctly \u2014 added Stripe.js v3 enqueue on product pages + publishable key fallback to WC Stripe settings + try\/catch on card.mount with requestAnimationFrame\n* Fix (C1 Phase A) #230: \"Invoice KLK-YYYY-NNNNNN\" button now appears in My Account Auction Purchases tab (held\/released\/default rows)\n* Fix (C3) #227\/#209: Vendor Payouts page content no longer clipped \u2014 moved .dokan-kloktion-payouts class to inner article, overflow: visible\n* Security: Removed silent DB fallback in REST escrow confirm when Stripe_Payment class unavailable (now returns 503)\n\n= 3.3.0 - 2026-04-23 =\n* Fix (C2 BLOCKER) #211: Dutch Auction product type now persists after vendor save (Dokan override prevented via late woocommerce_update_product hook)\n* Fix (C2) #221: Vendor duration options synced with admin (3, 5, 7, 10 days only)\n* Change (C2) #212: Race-to-Pay \"IN CHECKOUT\" UI indicator commented out per client decision 2026-04-14 (backend lock preserved)\n* Fix (C3) #222: Stripe dashboard login URL now returned in AJAX refresh_status response\n* Fix (C3) #224: \"Funds held until delivery confirmed\" text added to buyer My Account + notice renderer for kloktion_notice query param\n* Fix (C3) #225: Button label changed from \"Confirm Receipt\" to \"Confirm Delivery\" (all user-facing occurrences)\n* Fix (C3 BLOCKER) #226: release_escrow now atomic (WHERE status='held' lock), with Stripe Idempotency-Key, PaymentIntent.latest_charge fallback, and proper REST error surfacing\n* Fix (C3) #209: Vendor Payouts page now uses standard Dokan dashboard layout with sidebar\n* New (Phase A C1): Paid Invoice generation - sequential KLK-YYYY-NNNNNN numbering, HTML printable invoice page, invoice info in confirmation email, \"Invoice\" action on My Account orders\n* New (Phase A C1): Smart card entry popup - inline Stripe Elements modal on product page (no wallet redirect)\n* New (Phase A C1): FingerprintJS integration - device fingerprint on Buy Now for anti-duplicate-account detection\n* New (Phase A C1): reCAPTCHA v3 protection extended to login and registration forms\n* New (Phase A C1): Exit vendor dashboard link - \"Browse Shop\" added to Dokan vendor sidebar\n* Security: Remove silent DB fallback in REST escrow confirm when Stripe unavailable (now returns 503)\n\n= 3.2.0 - 2026-04-10 =\n* New: Contract 2 \u2014 Vendor Update Moderation (auctions awaiting publish go to a moderation queue; admin approve\/reject flow)\n* New: Contract 2 \u2014 Race-to-Pay UI indicators (shows when another buyer is in checkout)\n* New: Contract 3 \u2014 Stripe Connect escrow for vendors (destination charge with separate charge + transfer flow)\n* New: Contract 3 \u2014 Vendor Stripe Connect onboarding UI in Dokan dashboard\n* New: Contract 3 \u2014 Buyer escrow confirmation UI with REST endpoints\n* New: Contract 3 \u2014 Admin dispute resolution dashboard\n* New: Contract 3 \u2014 Auto-release cron (configurable window, default 10 days) + 5 new email classes\n* New: Settings page fields for escrow window, moderation, Stripe Connect\n* Security: 3DS lock on payment, moderation dedup, separate charge+transfer with rollback\n* Fix: Email table layout, N+1 query on moderation queue, responsive grids, contrast improvements\n* DB: New tables for moderation queue, escrow holds, disputes; state machine extended\n\n= 3.1.2 - 2026-03-30 =\n* Fix: Consent checkbox always visible on card form\n* Fix: Consent state resets when card is removed\n* Improve: Record consent on card save\n\n= 3.1.1 - 2026-03-29 =\n* Fix: Consent checkbox visibility\n* Fix: ZIP code field validation\n* Fix: Banner color\n* Fix: Mobile shop layout\n\n= 3.1.0 - 2026-03-28 =\n* New: Contract 1 \u2014 Buyer Protection wallet, zero-euro authorization hold\n* New: Contract 1 \u2014 Card Registration with Stripe Elements\n* New: Contract 1 \u2014 Padlock indicator on checkout\n* Fix: Banner color, header layout, Stripe Elements loading\n\n= 3.0.12 - 2026-03-13 =\n* Fix: My Auctions page now renders with proper Dokan dashboard layout and sidebar (QA #81)\n* Fix: Dutch Auction products now appear in Dokan vendor Products listing (QA #83)\n* Add: Register dutch_auction type in Dokan product types filter\n\n= 3.0.11 - 2026-03-12 =\n* Fix: Ended\/sold auctions now excluded from shop and search queries (QA #80)\n* Fix: My Auctions vendor page layout - removed duplicate Dokan wrapper (QA #81)\n* Fix: Email \"From\" name now shows \"Kloktion\" instead of site title (QA #82)\n* Fix: Email header and footer branded as \"Kloktion\" instead of \"WordPress\" (QA #82)\n* Fix: Email subject uses [Kloktion] prefix instead of [site_title]\n\n= 3.0.10 - 2026-03-12 =\n* Improve: Processing lock timeout reduced to 5 minutes (was 15)\n* New: Vendor field lock - auction parameters locked after auction starts (Dokan)\n* Improve: Email signature changed to \"Best regards, the Kloktion team\"\n\n= 3.0.9 - 2026-03-11 =\n* New: Completed Sales tab in buyer My Account (watched auctions that ended)\n* New: My Sales vendor stats in Dokan dashboard (yearly revenue, items sold, avg price)\n* New: Filter tabs on vendor My Auctions page (All \/ Live \/ Sold \/ Unsold with counts)\n* Improve: Ended auctions hidden from shop via WooCommerce catalog visibility\n* Improve: Related Products only shows active auctions\n* Improve: Watched Auctions tab now shows active auctions only (completed moved to own tab)\n\n= 3.0.8 - 2026-03-06 =\n* Improve: Duration options reduced to 3, 5, 7, 10 days only (client request)\n* Improve: Starting price shown as \"Starting price: X\" label instead of crossed-out text\n* Improve: Smooth continuous price decay animation (100ms interpolation between polls)\n* Fix: \"Processing\" status now shows \"IN CHECKOUT\" badge instead of falling through to \"ENDED\"\n* Fix: Processing auction displays notice explaining another buyer is checking out\n* New: Payment confirmation notice on order-pay page for auction orders\n\n= 3.0.7 - 2026-03-05 =\n* Improve: Schedule split into separate Date and Time fields (eBay-style UX)\n* Improve: WC pricing fields hiding moved to external JS for reliability\n* Improve: New products default to Dutch Auction type (no more Regular\/Sale price confusion)\n* Improve: Currency symbol in price labels uses WC setting instead of hardcoded $\n* Improve: Duration label renamed to \"Listing Duration\" for clarity\n* New: 10-day duration option added\n\n= 3.0.6 - 2026-03-05 =\n* Fix: First Publish now saves auction data (product-type check from POST, not DB)\n* Fix: Price freezes on Buy Now - cart\/checkout shows locked price, not live decay\n* Fix: Scheduled auction timer shows \"Starts in:\" instead of wrong duration total\n* Fix: Order Received page shows payment method for auction orders\n* New: Global Pause toggle in Settings - block all purchases site-wide for maintenance\n\n= 3.0.5 - 2026-03-04 =\n* Fix: Admin can now restart expired\/stopped auctions via \"Start immediately\" checkbox\n* Fix: State machine allows expired\/stopped to transition back to active\/scheduled\n\n= 3.0.4 - 2026-03-04 =\n* Fix: WC summary price now syncs with real-time auction price on frontend\n* New: [kloktion_auctions] shortcode for listing auctions filtered by status\n\n= 3.0.3 - 2026-03-04 =\n* Fix: Auctions with no reserve now expire correctly (active->expired transition)\n* Fix: Active auctions expire when duration exceeded regardless of reserve setting\n* Fix: Frontend countdown triggers immediate status poll when timer hits zero\n* Fix: Dokan purchasability filter blocked guests (user_id 0 matched author 0)\n\n= 3.0.2 - 2026-03-04 =\n* Fix: Lock ownership verified before releasing on failed\/cancelled orders\n* Fix: Admin status badge XSS - escape fallback status value\n* Fix: One-click buy validates product publish status\n\n= 3.0.1 - 2026-03-04 =\n* Fix: WP object cache desync after atomic lock acquisition\n* Fix: Orphaned auction locks when WC checkout validation fails\n* Fix: Pending order exploit - validate lock holder on order-pay page\n* Fix: One-click buy catches \\Throwable to prevent orphaned locks\n* Fix: One-click buy validates add_product result before proceeding\n* Fix: One-click buy calculates shipping for physical products\n* Fix: Justice delete verifies product is dutch_auction type\n* Fix: Payment hooks now load on admin too (manual order status changes)\n* Fix: REST API checks publish status to prevent data disclosure\n\n= 3.0.0 - 2026-03-04 =\n* Initial release\n* Core Dutch Auction engine with linear price decay\n* Dokan vendor integration\n* Stripe one-click purchase with race condition handling\n* Watchlist with price alerts\n* Admin Justice Button and Global Pause\n* WooCommerce email notifications (auction sold, expired, last chance)\n* Elementor compatible via [kloktion_auction] shortcode\n* My Account tabs for auction purchases and watchlist\n* Reserve price support (optional)\n* Live pulse indicator for active auctions\n* Heart\/favorite icon on shop and single product pages\n"},"result":null}
{"timestamp":"2026-06-04 12:49:11","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php","content":"<?php\n\/**\n * Cloudflare Turnstile integration \u2014 Buy Now bot protection.\n *\n * Sitekey is public (committed). Secret lives in wp_option `kloktion_turnstile_secret`,\n * set on the live site via swissknife after deploy. If the option is empty,\n * Turnstile verification is skipped (fail-open at the gate, fail-closed once enabled).\n *\n * @package Kloktion\n *\/\n\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass Turnstile {\n\n    const SITE_KEY      = '0x4AAAAAADVTH796CcB5MBVX';\n    const SCRIPT_HANDLE = 'cf-turnstile';\n    const VERIFY_URL    = 'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify';\n\n    \/**\n     * Is Turnstile enabled? Requires the secret option to be set on the live site.\n     *\/\n    public static function is_enabled(): bool {\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        return ! empty( $secret ) && ! empty( self::SITE_KEY );\n    }\n\n    \/**\n     * Enqueue the CF challenges API script. Idempotent.\n     *\/\n    public static function enqueue_script(): void {\n        if ( ! self::is_enabled() ) {\n            return;\n        }\n        if ( ! wp_script_is( self::SCRIPT_HANDLE, 'enqueued' ) ) {\n            wp_enqueue_script(\n                self::SCRIPT_HANDLE,\n                'https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js',\n                [],\n                null,\n                [ 'in_footer' => true, 'strategy' => 'async' ]\n            );\n        }\n    }\n\n    \/**\n     * Render the Turnstile widget HTML. Output is safe to echo.\n     *\/\n    public static function render_widget( string $callback_name = 'kloktionTurnstileCallback' ): string {\n        if ( ! self::is_enabled() ) {\n            return '';\n        }\n        return sprintf(\n            '<div class=\"cf-turnstile kloktion-turnstile\" id=\"kloktion-cf-widget\" data-sitekey=\"%s\" data-callback=\"%s\" data-execution=\"execute\" data-appearance=\"interaction-only\" data-theme=\"auto\" data-size=\"flexible\"><\/div>',\n            esc_attr( self::SITE_KEY ),\n            esc_attr( $callback_name )\n        );\n    }\n\n    \/**\n     * Verify a Turnstile token server-side.\n     *\n     * @return array{success:bool, error_codes?:array, message?:string}\n     *\/\n    public static function verify( string $token, string $remoteip = '' ): array {\n        if ( ! self::is_enabled() ) {\n            return [ 'success' => true, 'message' => 'turnstile_disabled' ];\n        }\n        if ( empty( $token ) ) {\n            return [ 'success' => false, 'message' => 'missing_token' ];\n        }\n        $secret = get_option( 'kloktion_turnstile_secret', '' );\n        if ( empty( $secret ) ) {\n            return [ 'success' => true, 'message' => 'no_secret' ];\n        }\n        $body = [\n            'secret'   => $secret,\n            'response' => $token,\n        ];\n        if ( ! empty( $remoteip ) ) {\n            $body['remoteip'] = $remoteip;\n        }\n        $response = wp_remote_post(\n            self::VERIFY_URL,\n            [\n                'timeout'   => 6,\n                'body'      => $body,\n                'sslverify' => true,\n            ]\n        );\n        if ( is_wp_error( $response ) ) {\n            return [ 'success' => false, 'message' => 'request_failed: ' . $response->get_error_message() ];\n        }\n        $code = wp_remote_retrieve_response_code( $response );\n        if ( 200 !== $code ) {\n            return [ 'success' => false, 'message' => 'http_' . $code ];\n        }\n        $data = json_decode( wp_remote_retrieve_body( $response ), true );\n        if ( ! is_array( $data ) ) {\n            return [ 'success' => false, 'message' => 'invalid_response' ];\n        }\n        return [\n            'success'     => ! empty( $data['success'] ),\n            'error_codes' => isset( $data['error-codes'] ) ? (array) $data['error-codes'] : [],\n        ];\n    }\n}\n"},"result":null}
{"timestamp":"2026-06-04 12:49:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-one-click.php","content":"<?php\nnamespace Kloktion;\n\ndefined( 'ABSPATH' ) || exit;\n\nclass One_Click {\n\n    public static function init(): void {\n        add_action( 'wp_ajax_kloktion_one_click_buy', [ __CLASS__, 'handle_buy' ] );\n        add_action( 'woocommerce_single_product_summary', [ __CLASS__, 'render_button' ], 31 );\n        add_action( 'wp_enqueue_scripts', [ __CLASS__, 'enqueue_scripts' ] );\n    }\n\n    public static function enqueue_scripts(): void {\n        \\Kloktion\\Turnstile::enqueue_script(); \/\/ R12: bot protection\n    }\n\n    public static function render_button(): void {\n        global $product;\n        if ( ! $product instanceof Product_Type ) {\n            return;\n        }\n\n        $status = $product->get_auction_status();\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            return;\n        }\n\n        if ( ! is_user_logged_in() ) {\n            return;\n        }\n\n        $nonce    = wp_create_nonce( 'kloktion_one_click' );\n        $has_card   = Card_Manager::has_valid_card( get_current_user_id() );\n        $wallet_url = wc_get_account_endpoint_url( 'my-wallet' );\n\n        $turnstile_widget = \\Kloktion\\Turnstile::render_widget( 'kloktionTurnstileCallback' ); \/\/ R12: bot protection\n\n        \/\/ Option B: execute-on-demand \u2014 Buy button is never pre-disabled for Turnstile.\n        \/\/ The challenge runs on Buy Now click, not on page load or toggle activation.\n        $buy_extra_attrs = '';\n\n        printf(\n            '<div class=\"kloktion-one-click\">\n        <span class=\"kloktion-one-click__instruction\">%s<\/span>\n        <div class=\"kloktion-one-click__track\">\n            <span class=\"kloktion-one-click__label\">%s<\/span>\n            <button type=\"button\" class=\"kloktion-one-click__btn button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\" aria-label=\"%s\" aria-pressed=\"false\">&#10132;<\/button>\n        <\/div>\n        <div class=\"kloktion-one-click__turnstile\">%s<\/div>\n        <button type=\"button\" class=\"kloktion-one-click__buy button alt\" data-product-id=\"%d\" data-nonce=\"%s\" data-has-card=\"%s\" data-wallet-url=\"%s\"%s hidden>%s<\/button>\n        <span class=\"kloktion-one-click__note\">%s<\/span>\n        <input type=\"text\" class=\"kloktion-honeypot-field\" name=\"kloktion_website_url\" id=\"kloktion_one_click_hp_%d\" tabindex=\"-1\" autocomplete=\"off\" aria-hidden=\"true\" value=\"\">\n    <\/div>',\n            esc_html__( 'Switch to Active to participate', 'kloktion-dutch-auction' ),\n            esc_html__( 'Deactivated', 'kloktion-dutch-auction' ),\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            esc_attr__( 'Slide right to activate purchase mode', 'kloktion-dutch-auction' ),\n            $turnstile_widget, \/\/ R12: bot protection widget (already escaped inside render_widget)\n            esc_attr( $product->get_id() ),\n            esc_attr( $nonce ),\n            esc_attr( $has_card ? 'yes' : 'no' ),\n            esc_attr( $wallet_url ),\n            $buy_extra_attrs, \/\/ Option B: always empty \u2014 Turnstile executes on click, not pre-load\n            esc_html( sprintf( __( 'Buy Now at %s', 'kloktion-dutch-auction' ), wp_strip_all_tags( wc_price( $product->get_price() ) ) ) ),\n            esc_html__( 'Activate first, then click Buy Now to reserve the lot for 96 hours.', 'kloktion-dutch-auction' ),\n            (int) $product->get_id()\n        );\n    }\n\n    public static function handle_buy(): void {\n        check_ajax_referer( 'kloktion_one_click', 'nonce' );\n\n        \/\/ Honeypot check - bots that fill the decoy field are rejected here.\n        $hp_value = isset( $_POST['website_url'] ) ? (string) $_POST['website_url'] : '';\n        if ( $hp_value === '' && isset( $_POST['kloktion_website_url'] ) ) {\n            $hp_value = (string) $_POST['kloktion_website_url'];\n        }\n        if ( $hp_value !== '' ) {\n            $ip  = class_exists( '\\WC_Geolocation' ) ? \\WC_Geolocation::get_ip_address() : ( $_SERVER['REMOTE_ADDR'] ?? '0.0.0.0' );\n            $ua  = isset( $_SERVER['HTTP_USER_AGENT'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : '';\n            $pid = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n            error_log( sprintf( 'Kloktion honeypot tripped: ip=%s ua=%s endpoint=admin-ajax\/one-click value=%s product=%d', $ip, $ua, $hp_value, $pid ) );\n            wp_send_json_error( [ 'message' => __( 'Forbidden.', 'kloktion-dutch-auction' ) ], 403 );\n            return;\n        }\n\n        \/\/ R12: Cloudflare Turnstile bot challenge verification.\n        if ( \\Kloktion\\Turnstile::is_enabled() ) {\n            $cf_token = isset( $_POST['cf_turnstile_token'] ) ? sanitize_text_field( wp_unslash( $_POST['cf_turnstile_token'] ) ) : '';\n            if ( empty( $cf_token ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_missing', 'message' => __( 'Bot challenge missing. Please refresh the page.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n            $remote_ip = isset( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_CF_CONNECTING_IP'] ) ) : ( $_SERVER['REMOTE_ADDR'] ?? '' );\n            $check = \\Kloktion\\Turnstile::verify( $cf_token, (string) $remote_ip );\n            if ( empty( $check['success'] ) ) {\n                wp_send_json_error(\n                    [ 'code' => 'cf_turnstile_failed', 'message' => __( 'Bot challenge failed. Please try again.', 'kloktion-dutch-auction' ) ],\n                    403\n                );\n                return;\n            }\n        }\n\n        $fingerprint = isset( $_COOKIE['kloktion_fp'] ) ? sanitize_text_field( wp_unslash( $_COOKIE['kloktion_fp'] ) ) : '';\n        if ( $fingerprint ) {\n            $user_id_fp = get_current_user_id();\n            if ( $user_id_fp ) {\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint', $fingerprint );\n                update_user_meta( $user_id_fp, '_kloktion_fingerprint_updated', time() );\n            }\n            $dupes = get_users( [\n                'meta_key'   => '_kloktion_fingerprint',\n                'meta_value' => $fingerprint,\n                'number'     => 4,\n                'fields'     => 'ID',\n            ] );\n            $dupes = array_diff( (array) $dupes, [ $user_id_fp ] );\n            if ( count( $dupes ) >= 2 ) {\n                do_action( 'kloktion_fingerprint_suspicious', $user_id_fp, $fingerprint, $dupes );\n                error_log( sprintf( '[KLOKTION FP] User %d fingerprint %s shared with users %s', $user_id_fp, $fingerprint, implode( ',', $dupes ) ) );\n            }\n        }\n\n        $user_id    = get_current_user_id();\n        $product_id = isset( $_POST['product_id'] ) ? absint( $_POST['product_id'] ) : 0;\n\n        if ( ! $user_id || ! $product_id ) {\n            wp_send_json_error( [ 'message' => __( 'Invalid request.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $product = wc_get_product( $product_id );\n        if ( ! $product || ! $product instanceof Product_Type || 'publish' !== get_post_status( $product_id ) ) {\n            wp_send_json_error( [ 'message' => __( 'Product not found.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $settings = get_option( 'kloktion_settings', [] );\n        if ( ! empty( $settings['global_pause'] ) ) {\n            wp_send_json_error( [ 'message' => __( 'All auctions are temporarily paused. Please check back soon.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $status = Auction_Engine::get_status( $product_id );\n        if ( ! in_array( $status, [ 'active', 'paused' ], true ) ) {\n            wp_send_json_error( [ 'message' => __( 'This auction is no longer available.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        \/\/ Check if user has a valid card registered\n        if ( ! Card_Manager::has_valid_card( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please register a payment card before participating in auctions.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_card',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        \/\/ Check if user accepted penalty terms\n        if ( ! Card_Manager::has_consent( $user_id ) ) {\n            wp_send_json_error( [\n                'message'    => __( 'Please accept the Terms and Conditions in My Wallet before participating.', 'kloktion-dutch-auction' ),\n                'code'       => 'no_consent',\n                'wallet_url' => wc_get_account_endpoint_url( 'my-wallet' ),\n            ] );\n        }\n\n        $lock = Checkout_Handler::acquire_lock( $product_id, $user_id );\n        if ( ! $lock ) {\n            wp_send_json_error( [ 'message' => __( 'Someone else is completing this purchase. Please wait.', 'kloktion-dutch-auction' ) ] );\n        }\n\n        $frozen_price = Auction_Engine::calculate_price( $product_id );\n        $start_price  = (float) get_post_meta( $product_id, '_kloktion_start_price', true );\n        $savings_pct  = $start_price > 0 ? round( ( $start_price - $frozen_price ) \/ $start_price * 100 ) : 0;\n\n        try {\n            $order = wc_create_order( [\n                'customer_id' => $user_id,\n                'status'      => 'pending',\n            ] );\n\n            if ( is_wp_error( $order ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => $order->get_error_message() ] );\n            }\n\n            $item_id = $order->add_product( $product, 1, [\n                'subtotal' => $frozen_price,\n                'total'    => $frozen_price,\n            ] );\n\n            if ( ! $item_id || is_wp_error( $item_id ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                wp_send_json_error( [ 'message' => __( 'Unable to add product to order.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            wc_add_order_item_meta( $item_id, '_kloktion_frozen_price', $frozen_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_start_price', $start_price );\n            wc_add_order_item_meta( $item_id, '_kloktion_savings_percent', $savings_pct );\n            wc_add_order_item_meta( $item_id, '_kloktion_product_id', $product_id );\n            wc_add_order_item_meta( $item_id, '_kloktion_one_click', 'yes' );\n\n            $customer = new \\WC_Customer( $user_id );\n            $order->set_billing_first_name( $customer->get_billing_first_name() );\n            $order->set_billing_last_name( $customer->get_billing_last_name() );\n            $order->set_billing_email( $customer->get_billing_email() );\n            $order->set_billing_phone( $customer->get_billing_phone() );\n            $order->set_billing_address_1( $customer->get_billing_address_1() );\n            $order->set_billing_city( $customer->get_billing_city() );\n            $order->set_billing_state( $customer->get_billing_state() );\n            $order->set_billing_postcode( $customer->get_billing_postcode() );\n            $order->set_billing_country( $customer->get_billing_country() );\n\n            \/\/ Apply shipping if product needs it and customer has an address.\n            if ( $product->needs_shipping() ) {\n                $packages = [\n                    [\n                        'contents'    => [\n                            [\n                                'product_id' => $product_id,\n                                'quantity'   => 1,\n                                'data'       => $product,\n                                'line_total' => $frozen_price,\n                            ],\n                        ],\n                        'destination' => [\n                            'country'  => $customer->get_shipping_country() ?: $customer->get_billing_country(),\n                            'state'    => $customer->get_shipping_state() ?: $customer->get_billing_state(),\n                            'postcode' => $customer->get_shipping_postcode() ?: $customer->get_billing_postcode(),\n                            'city'     => $customer->get_shipping_city() ?: $customer->get_billing_city(),\n                        ],\n                    ],\n                ];\n                $shipping_methods = \\WC()->shipping()->calculate_shipping( $packages );\n                if ( ! empty( $packages[0]['rates'] ) ) {\n                    $rate = reset( $packages[0]['rates'] );\n                    $shipping_item = new \\WC_Order_Item_Shipping();\n                    $shipping_item->set_method_title( $rate->get_label() );\n                    $shipping_item->set_method_id( $rate->get_method_id() );\n                    $shipping_item->set_total( $rate->get_cost() );\n                    $order->add_item( $shipping_item );\n                }\n            }\n\n            $order->calculate_totals();\n            $order->save();\n\n            update_post_meta( $product_id, '_kloktion_pending_order', $order->get_id() );\n\n            if ( ! Auction_Engine::mark_pending_purchase( $product_id, $user_id, $order->get_id(), $frozen_price ) ) {\n                Checkout_Handler::release_lock( $product_id );\n                $order->update_status( 'cancelled', __( 'Unable to reserve this auction for payment.', 'kloktion-dutch-auction' ) );\n                wp_send_json_error( [ 'message' => __( 'Unable to reserve this auction. Please try again.', 'kloktion-dutch-auction' ) ] );\n                return;\n            }\n\n            delete_post_meta( $product_id, '_kloktion_processing_user' );\n            delete_post_meta( $product_id, '_kloktion_processing_since' );\n\n            $order->add_order_note(\n                __( 'Dutch Auction lot reserved. Buyer has 96 hours to complete payment before penalty rules apply.', 'kloktion-dutch-auction' )\n            );\n\n            wp_send_json_success( [\n                'redirect' => $order->get_checkout_payment_url(),\n                'order_id' => $order->get_id(),\n            ] );\n\n        } catch ( \\Throwable $e ) {\n            Checkout_Handler::release_lock( $product_id );\n            Logger::log( $product_id, 'one_click_error', null, $user_id, [\n                'error' => $e->getMessage(),\n            ] );\n            wp_send_json_error( [ 'message' => __( 'Unable to process your purchase. Please try again.', 'kloktion-dutch-auction' ) ] );\n        }\n    }\n\n}\n"},"result":null}
{"timestamp":"2026-06-04 12:49:12","ip":"2a01:4f8:110:1444::2","action":"file_write","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/assets\/js\/kloktion-frontend.js","content":"(function () {\n    'use strict';\n\n    if (typeof kloctionData === 'undefined') return;\n\n    var el = document.querySelector('.kloktion-auction');\n    if (!el) return;\n\n    var config = {\n        productId: kloctionData.productId,\n        pollInterval: (kloctionData.pollInterval || 2) * 1000,\n        apiBase: kloctionData.apiBase,\n        nonce: kloctionData.nonce,\n        currency: kloctionData.currency,\n    };\n\n    var state = {\n        status: kloctionData.status,\n        currentPrice: kloctionData.currentPrice,\n        startPrice: kloctionData.startPrice,\n        reservePrice: kloctionData.reservePrice,\n        timeRemaining: kloctionData.timeRemaining,\n        progress: kloctionData.progress,\n    };\n\n    var pollTimer = null;\n    var countdownTimer = null;\n    var errorCount = 0;\n    var isVisible = true;\n    var interpolationTimer = null;\n    var lastPollPrice = state.currentPrice;\n    var decayPerSecond = 0;\n\n    function formatPrice(price) {\n        return config.currency + parseFloat(price).toFixed(2);\n    }\n\n    function updateUI(data) {\n        if (data.status) state.status = data.status;\n        if (data.current_price !== undefined) {\n            \/\/ Calculate decay rate from price difference between polls.\n            if (lastPollPrice > 0 && data.current_price < lastPollPrice) {\n                var priceDiff = lastPollPrice - data.current_price;\n                var interval = config.pollInterval \/ 1000;\n                decayPerSecond = priceDiff \/ interval;\n            }\n            lastPollPrice = data.current_price;\n            state.currentPrice = data.current_price;\n        }\n        if (data.progress !== undefined) state.progress = data.progress;\n        if (data.time_remaining !== undefined) state.timeRemaining = data.time_remaining;\n\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge) {\n            var badges = {\n                active: { label: 'LIVE', cls: 'active' },\n                paused: { label: 'LAST CHANCE', cls: 'paused' },\n                pending_purchase: { label: 'PENDING PAYMENT', cls: 'processing' },\n                \/\/ #212: processing: { label: 'IN CHECKOUT', cls: 'processing' },\n                scheduled: { label: 'STARTING SOON', cls: 'scheduled' },\n                sold: { label: 'SOLD', cls: 'sold' },\n                expired: { label: 'ENDED', cls: 'ended' },\n                stopped: { label: 'STOPPED', cls: 'stopped' },\n            };\n            var b = badges[state.status] || badges.ended;\n            badge.className = 'kloktion-badge kloktion-badge--' + b.cls;\n            badge.textContent = b.label;\n        }\n\n        var priceEl = el.querySelector('.kloktion-price__current');\n        if (priceEl && (state.status === 'active' || state.status === 'paused')) {\n            var newPrice = formatPrice(state.currentPrice);\n            if (priceEl.textContent.trim() !== newPrice) {\n                priceEl.classList.add('kloktion-price--updating');\n                priceEl.textContent = newPrice;\n                setTimeout(function () {\n                    priceEl.classList.remove('kloktion-price--updating');\n                }, 300);\n            }\n        }\n\n        var savingsEl = el.querySelector('.kloktion-savings');\n        if (savingsEl && state.startPrice > 0) {\n            var pct = Math.round(((state.startPrice - state.currentPrice) \/ state.startPrice) * 100);\n            savingsEl.textContent = 'Save ' + pct + '%';\n        }\n\n        var progressLabels = el.querySelectorAll('.kloktion-progress__labels span');\n        if (progressLabels.length === 2) {\n            progressLabels[1].textContent = state.reservePrice > 0 ? formatPrice(state.reservePrice) : 'No Reserve';\n        }\n\n        var fill = el.querySelector('.kloktion-progress__fill');\n        if (fill) {\n            fill.style.width = Math.min(100, Math.max(0, state.progress * 100)).toFixed(1) + '%';\n        }\n\n        var timerLabel = el.querySelector('.kloktion-timer__label');\n        if (timerLabel) {\n            if (state.status === 'scheduled') {\n                timerLabel.textContent = 'Starts in:';\n            } else if (state.status === 'paused') {\n                timerLabel.textContent = 'Last chance expires in:';\n            } else if (state.status === 'active') {\n                timerLabel.textContent = 'Time remaining:';\n            } else if (state.status === 'pending_purchase') {\n                timerLabel.textContent = 'Payment window:';\n            }\n        }\n\n        \/\/ Sync WC summary price so it matches the real-time auction price.\n        var wcPrice = document.querySelector('.summary .price');\n        if (wcPrice && (state.status === 'active' || state.status === 'paused')) {\n            var delEl = wcPrice.querySelector('del');\n            var insEl = wcPrice.querySelector('ins');\n            if (insEl) {\n                insEl.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            } else if (!delEl) {\n                wcPrice.innerHTML = '<span class=\"woocommerce-Price-amount amount\">' +\n                    '<bdi><span class=\"woocommerce-Price-currencySymbol\">' +\n                    config.currency + '<\/span>' + parseFloat(state.currentPrice).toFixed(2) +\n                    '<\/bdi><\/span>';\n            }\n        }\n\n        var buyBtn = document.querySelector('.single_add_to_cart_button');\n        if (buyBtn) {\n            if (state.status === 'active' || state.status === 'paused') {\n                buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n                buyBtn.disabled = false;\n            \/* #212:\n            } else if (state.status === 'processing') {\n                buyBtn.textContent = 'In Checkout...';\n                buyBtn.disabled = true;\n            #212 end *\/ } else {\n                buyBtn.disabled = true;\n            }\n        }\n\n        var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n        if (oneClickBuy && (state.status === 'active' || state.status === 'paused')) {\n            oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }\n\n        if (['sold', 'expired', 'stopped', 'pending_purchase'].indexOf(state.status) !== -1) {\n            stopPolling();\n        }\n    }\n\n    function startCountdown() {\n        if (countdownTimer) clearInterval(countdownTimer);\n\n        countdownTimer = setInterval(function () {\n            if (state.timeRemaining > 0) {\n                state.timeRemaining--;\n                if (state.timeRemaining === 0) {\n                    poll();\n                }\n            }\n\n            var digits = el.querySelector('.kloktion-timer__digits');\n            if (!digits) return;\n\n            var t = state.timeRemaining;\n            var h = Math.floor(t \/ 3600);\n            var m = Math.floor((t % 3600) \/ 60);\n            var s = t % 60;\n\n            var hEl = digits.querySelector('[data-unit=\"hours\"]');\n            var mEl = digits.querySelector('[data-unit=\"minutes\"]');\n            var sEl = digits.querySelector('[data-unit=\"seconds\"]');\n\n            if (hEl) hEl.textContent = String(h).padStart(2, '0');\n            if (mEl) mEl.textContent = String(m).padStart(2, '0');\n            if (sEl) sEl.textContent = String(s).padStart(2, '0');\n        }, 1000);\n    }\n\n    function poll() {\n        if (!isVisible) return;\n\n        fetch(config.apiBase + '\/auction\/' + config.productId, {\n            headers: { 'X-WP-Nonce': config.nonce },\n        })\n        .then(function (res) {\n            if (res.status === 429) {\n                var retry = parseInt(res.headers.get('Retry-After') || '60', 10);\n                pollTimer = setTimeout(poll, retry * 1000);\n                return null;\n            }\n            if (res.status === 404) {\n                stopPolling();\n                return null;\n            }\n            if (!res.ok) throw new Error('HTTP ' + res.status);\n            return res.json();\n        })\n        .then(function (data) {\n            if (!data) return;\n            updateUI(data);\n            errorCount = 0;\n            schedulePoll();\n        })\n        .catch(function () {\n            errorCount++;\n            var backoff = Math.min(30000, config.pollInterval * Math.pow(2, errorCount));\n            pollTimer = setTimeout(poll, backoff);\n        });\n    }\n\n    function schedulePoll() {\n        if (pollTimer) clearTimeout(pollTimer);\n        pollTimer = setTimeout(poll, config.pollInterval);\n    }\n\n    function startInterpolation() {\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        interpolationTimer = setInterval(function () {\n            if (decayPerSecond <= 0 || state.status !== 'active') return;\n            var step = decayPerSecond * 0.1; \/\/ 100ms step\n            var minPrice = state.reservePrice > 0 ? state.reservePrice : 0;\n            state.currentPrice = Math.max(minPrice, state.currentPrice - step);\n            var priceEl = el.querySelector('.kloktion-price__current');\n            if (priceEl) priceEl.textContent = formatPrice(state.currentPrice);\n            var buyBtn = document.querySelector('.single_add_to_cart_button');\n            if (buyBtn && !buyBtn.disabled) buyBtn.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n            var oneClickBuy = document.querySelector('.kloktion-one-click__buy');\n            if (oneClickBuy && !oneClickBuy.disabled) oneClickBuy.textContent = 'Buy Now at ' + formatPrice(state.currentPrice);\n        }, 100);\n    }\n\n    function stopPolling() {\n        if (pollTimer) clearTimeout(pollTimer);\n        if (countdownTimer) clearInterval(countdownTimer);\n        if (interpolationTimer) clearInterval(interpolationTimer);\n        pollTimer = null;\n        countdownTimer = null;\n        interpolationTimer = null;\n    }\n\n    document.addEventListener('visibilitychange', function () {\n        isVisible = !document.hidden;\n        if (isVisible) {\n            poll();\n            startCountdown();\n            if (state.status === 'active') startInterpolation();\n        } else {\n            stopPolling();\n        }\n    });\n\n    if (['active', 'paused', 'scheduled'].indexOf(state.status) !== -1) {\n        startCountdown();\n        schedulePoll();\n        if (state.status === 'active') startInterpolation();\n    }\n\n    \/\/ Swipe-to-confirm is handled by the dedicated IIFE below.\n\n    function toggleWatch(productId, nonce, callback) {\n        var formData = new FormData();\n        formData.append('action', 'kloktion_toggle_watch');\n        formData.append('product_id', productId);\n        formData.append('nonce', nonce);\n\n        fetch(kloctionData.ajaxUrl || '\/wp-admin\/admin-ajax.php', {\n            method: 'POST',\n            body: formData,\n            credentials: 'same-origin',\n        })\n        .then(function (res) { return res.json(); })\n        .then(function (res) {\n            if (res.success) callback(res.data.watching);\n        })\n        .catch(function () {});\n    }\n\n    function syncWatchUI(watching) {\n        var heart = document.querySelector('.kloktion-heart');\n        if (heart) {\n            heart.classList.toggle('kloktion-heart--active', watching);\n            heart.classList.add('kloktion-heart--animating');\n            setTimeout(function () { heart.classList.remove('kloktion-heart--animating'); }, 400);\n        }\n        var watchBtn = document.querySelector('.kloktion-watch__btn');\n        if (watchBtn) {\n            watchBtn.classList.toggle('kloktion-watch--active', watching);\n            watchBtn.textContent = watching ? 'Watching' : 'Watch This Auction';\n        }\n    }\n\n    var heartBtn = document.querySelector('.kloktion-heart');\n    if (heartBtn) {\n        heartBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var login = this.getAttribute('data-login');\n            if (login) { window.location.href = login; return; }\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var watchBtn = document.querySelector('.kloktion-watch__btn');\n    if (watchBtn) {\n        watchBtn.addEventListener('click', function (e) {\n            e.preventDefault();\n            var pid = this.getAttribute('data-product-id');\n            var nonce = this.getAttribute('data-nonce');\n            toggleWatch(pid, nonce, syncWatchUI);\n        });\n    }\n\n    var origUpdateUI = updateUI;\n    updateUI = function (data) {\n        origUpdateUI(data);\n        var badge = el.querySelector('.kloktion-badge');\n        if (badge && state.status === 'active' && !badge.querySelector('.kloktion-live-dot')) {\n            var dot = document.createElement('span');\n            dot.className = 'kloktion-live-dot';\n            badge.insertBefore(dot, badge.firstChild);\n        } else if (badge && state.status !== 'active') {\n            var existingDot = badge.querySelector('.kloktion-live-dot');\n            if (existingDot) existingDot.remove();\n        }\n    };\n})();\n\n\/* === CARD POPUP === *\/\n(function() {\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n})();\n\n\/* === ONE-CLICK BUY HANDLER (swipe-to-confirm, with card check) === *\/\n(function() {\n    \/\/ Option B: execute-on-demand Turnstile. Token is empty until the user clicks Buy Now.\n    window.kloktionTurnstileToken = '';\n    \/\/ Flag: a buy attempt is waiting for the Turnstile callback to deliver a token.\n    window.kloktionPendingBuy = false;\n    \/\/ Safety timeout handle for execute() calls that never resolve.\n    var kloktionTurnstileTimeout = null;\n\n    \/\/ Detect Turnstile by DOM widget presence.\n    function isTurnstileExpected() {\n        return !! document.querySelector( '.cf-turnstile.kloktion-turnstile' );\n    }\n\n    \/\/ Execute the Turnstile challenge on demand (called from fireBuy).\n    function executeTurnstile() {\n        if ( typeof window.turnstile === 'undefined' ) { return; }\n        try {\n            window.turnstile.execute( '#kloktion-cf-widget' );\n        } catch(e) {}\n    }\n\n    \/\/ Reset the widget after each purchase attempt so the next click gets a fresh token.\n    function resetTurnstile() {\n        if ( typeof window.turnstile === 'undefined' ) { return; }\n        try { window.turnstile.reset( '#kloktion-cf-widget' ); } catch(e) {}\n        window.kloktionTurnstileToken = '';\n    }\n\n    \/\/ Called by Turnstile when the challenge resolves (data-callback on the widget div).\n    window.kloktionTurnstileCallback = function( token ) {\n        window.kloktionTurnstileToken = token || '';\n\n        \/\/ Clear the safety timeout \u2014 we got a token in time.\n        if ( kloktionTurnstileTimeout ) {\n            clearTimeout( kloktionTurnstileTimeout );\n            kloktionTurnstileTimeout = null;\n        }\n\n        \/\/ If a buy click was waiting for this token, resume the purchase now.\n        if ( window.kloktionPendingBuy ) {\n            window.kloktionPendingBuy = false;\n            \/\/ Find the active buy button and re-enable it before proceeding.\n            document.querySelectorAll('.kloktion-one-click__buy').forEach(function(b) {\n                if ( ! b.hidden ) {\n                    b.disabled = false;\n                    b.setAttribute('aria-busy', 'false');\n                    if ( b.dataset.kloktionOrigText ) {\n                        b.textContent = b.dataset.kloktionOrigText;\n                        delete b.dataset.kloktionOrigText;\n                    }\n                }\n            });\n            \/\/ Resume by finding the active container's fireBuy.\n            var activeBuy = document.querySelector('.kloktion-one-click--active .kloktion-one-click__buy:not([hidden])');\n            if ( activeBuy ) {\n                var container = activeBuy.closest('.kloktion-one-click');\n                if ( container && typeof container._kloktionFireBuy === 'function' ) {\n                    container._kloktionFireBuy();\n                }\n            }\n        }\n    };\n\n    var ajaxUrl = (typeof kloctionData !== 'undefined') ? kloctionData.ajaxUrl : '';\n    if (!ajaxUrl) return;\n\n    document.querySelectorAll('.kloktion-one-click__btn').forEach(function(btn) {\n        if (btn.getAttribute('data-swipe-init')) return;\n        btn.setAttribute('data-swipe-init', '1');\n\n        var root = btn.closest('.kloktion-one-click');\n        var track = btn.closest('.kloktion-one-click__track');\n        var buyBtn = root ? root.querySelector('.kloktion-one-click__buy') : null;\n        var dragging = false;\n        var startX = 0;\n        var currentDelta = 0;\n        var active = false;\n        var suppressClick = false;\n\n        function getThumbWidth() {\n            return btn.offsetWidth || 52;\n        }\n\n        function getTrackWidth() {\n            return track ? track.offsetWidth : btn.offsetWidth;\n        }\n\n        function getLabelEl() {\n            return track ? track.querySelector('.kloktion-one-click__label') : null;\n        }\n\n        function getTrackMax() {\n            return Math.max(0, getTrackWidth() - getThumbWidth());\n        }\n\n        function snapBack() {\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n        }\n\n        function setActive(nextActive) {\n            active = !!nextActive;\n            var labelEl = getLabelEl();\n            if (root) root.classList.toggle('kloktion-one-click--active', active);\n            if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n            if (buyBtn) buyBtn.hidden = !active;\n            \/\/ R14-2: wrapper is no longer toggled hidden \u2014 interaction-only appearance manages\n            \/\/ its own visibility. The widget pre-solves on page load; hiding the wrapper\n            \/\/ here would move the CF iframe out of flow and could invalidate the token.\n            btn.setAttribute('aria-pressed', active ? 'true' : 'false');\n            btn.classList.remove('kloktion-one-click__btn--sliding');\n\n            var trackMax = getTrackMax();\n            btn.style.transform = active ? 'translateX(' + trackMax + 'px)' : '';\n            currentDelta = 0;\n\n            \/\/ Option B: Buy button is always enabled when active \u2014 Turnstile executes on click.\n            if (active && buyBtn) {\n                buyBtn.disabled = false;\n                buyBtn.removeAttribute('aria-busy');\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n            } else if (!active && buyBtn) {\n                \/\/ Deactivating \u2014 clear any pending buy state and restore button.\n                window.kloktionPendingBuy = false;\n                if ( kloktionTurnstileTimeout ) {\n                    clearTimeout( kloktionTurnstileTimeout );\n                    kloktionTurnstileTimeout = null;\n                }\n                buyBtn.removeAttribute('data-kloktion-await-turnstile');\n                buyBtn.dataset.kloktionPendingActive = '0';\n                buyBtn.removeAttribute('aria-busy');\n                if ( buyBtn.dataset.kloktionOrigText ) {\n                    buyBtn.textContent = buyBtn.dataset.kloktionOrigText;\n                    delete buyBtn.dataset.kloktionOrigText;\n                }\n            }\n        }\n\n        function getActionButton() {\n            return buyBtn || btn;\n        }\n\n        function fireBuy() {\n            var actionBtn = getActionButton();\n            if (actionBtn.disabled) return;\n\n            var hasCard = actionBtn.getAttribute('data-has-card') || btn.getAttribute('data-has-card');\n            var walletUrl = actionBtn.getAttribute('data-wallet-url') || btn.getAttribute('data-wallet-url');\n            if (hasCard === 'no') {\n                showCardPopup(walletUrl, function() {\n                    btn.setAttribute('data-has-card', 'yes');\n                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                    actionBtn.disabled = false;\n                    var lbl = getLabelEl();\n                    if (lbl) lbl.textContent = active ? 'Active' : 'Deactivated';\n                });\n                return;\n            }\n\n            \/\/ Option B: execute-on-demand \u2014 if Turnstile is expected and we have no token yet,\n            \/\/ trigger the challenge NOW and wait for the callback to resume the purchase.\n            if ( isTurnstileExpected() && ! window.kloktionTurnstileToken ) {\n                window.kloktionPendingBuy = true;\n                actionBtn.disabled = true;\n                actionBtn.setAttribute('aria-busy', 'true');\n                actionBtn.dataset.kloktionOrigText = actionBtn.dataset.kloktionOrigText || actionBtn.textContent;\n                actionBtn.textContent = 'Verifying...';\n\n                \/\/ Safety timeout: if Turnstile doesn't respond in 15s, restore and show retry message.\n                if ( kloktionTurnstileTimeout ) { clearTimeout( kloktionTurnstileTimeout ); }\n                kloktionTurnstileTimeout = setTimeout( function() {\n                    kloktionTurnstileTimeout = null;\n                    window.kloktionPendingBuy = false;\n                    actionBtn.disabled = false;\n                    actionBtn.setAttribute('aria-busy', 'false');\n                    if ( actionBtn.dataset.kloktionOrigText ) {\n                        actionBtn.textContent = actionBtn.dataset.kloktionOrigText;\n                        delete actionBtn.dataset.kloktionOrigText;\n                    }\n                    var labelEl = getLabelEl();\n                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    alert('Verification timed out. Please try again.');\n                }, 15000 );\n\n                executeTurnstile();\n                return; \/\/ Resume happens in kloktionTurnstileCallback.\n            }\n\n            actionBtn.disabled = true;\n            var labelEl = getLabelEl();\n            if (labelEl) labelEl.textContent = 'Processing...';\n\n            var productId = actionBtn.getAttribute('data-product-id') || btn.getAttribute('data-product-id');\n            var nonce = actionBtn.getAttribute('data-nonce') || btn.getAttribute('data-nonce');\n            var recaptchaKey = (typeof kloctionCard !== 'undefined') ? kloctionCard.recaptchaKey : '';\n\n            var proceed = function(recaptchaToken) {\n                var fd = new FormData();\n                fd.append('action', 'kloktion_one_click_buy');\n                fd.append('nonce', nonce);\n                fd.append('product_id', productId);\n                var hpInput = root ? root.querySelector('input[name=\"kloktion_website_url\"]') : null;\n                fd.append('website_url', hpInput ? hpInput.value : '');\n                if (recaptchaToken) fd.append('recaptcha_token', recaptchaToken);\n                fd.append('cf_turnstile_token', window.kloktionTurnstileToken || ''); \/\/ Option B: token from on-demand execute\n\n                fetch(ajaxUrl, { method: 'POST', body: fd, credentials: 'same-origin' })\n                    .then(function(r) { return r.json(); })\n                    .then(function(r) {\n                        \/\/ Option B: tokens are single-use \u2014 always reset after each attempt.\n                        resetTurnstile();\n                        if (r.success && r.data.redirect) {\n                            window.location.href = r.data.redirect;\n                        } else {\n                            var msg = r.data ? r.data.message : 'An error occurred';\n                            if (r.data && r.data.code === 'no_card') {\n                                showCardPopup(r.data.wallet_url, function() {\n                                    btn.setAttribute('data-has-card', 'yes');\n                                    if (buyBtn) buyBtn.setAttribute('data-has-card', 'yes');\n                                    actionBtn.disabled = false;\n                                    if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                                });\n                            } else {\n                                alert(msg);\n                                actionBtn.disabled = false;\n                                if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                            }\n                        }\n                    })\n                    .catch(function() {\n                        \/\/ Option B: network failure \u2014 reset token so next click re-executes fresh.\n                        resetTurnstile();\n                        actionBtn.disabled = false;\n                        if (labelEl) labelEl.textContent = active ? 'Active' : 'Deactivated';\n                    });\n            };\n\n            if (recaptchaKey && typeof grecaptcha !== 'undefined') {\n                grecaptcha.ready(function() {\n                    grecaptcha.execute(recaptchaKey, {action: 'buy_now'}).then(proceed);\n                });\n            } else {\n                proceed(null);\n            }\n        }\n\n        \/\/ Expose fireBuy on the container element so the delegated click handler can reach it.\n        if ( root ) { root._kloktionFireBuy = fireBuy; }\n\n        var startActive = false;\n\n        btn.addEventListener('pointerdown', function(e) {\n            if (btn.disabled) return;\n            dragging = true;\n            startX = e.clientX;\n            startActive = active;\n            currentDelta = 0;\n            btn.classList.add('kloktion-one-click__btn--sliding');\n            btn.setPointerCapture(e.pointerId);\n        });\n\n        btn.addEventListener('pointermove', function(e) {\n            if (!dragging) return;\n            var trackMax = getTrackMax();\n            var raw = e.clientX - startX;\n            var clamped;\n            if (!startActive) {\n                \/\/ drag left-to-right: clamp to [0, trackMax]\n                clamped = Math.min(Math.max(raw, 0), trackMax);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + clamped + 'px)';\n            } else {\n                \/\/ drag right-to-left: clamp to [-trackMax, 0], thumb starts at right edge\n                clamped = Math.min(Math.max(raw, -trackMax), 0);\n                currentDelta = clamped;\n                btn.style.transform = 'translateX(' + (trackMax + clamped) + 'px)';\n            }\n        });\n\n        btn.addEventListener('pointerup', function() {\n            if (!dragging) return;\n            dragging = false;\n            var trackMax = getTrackMax();\n            var threshold = 0.7 * trackMax;\n            if (!startActive && currentDelta >= threshold) {\n                suppressClick = true;\n                setActive(true);\n            } else if (startActive && currentDelta <= -threshold) {\n                suppressClick = true;\n                setActive(false);\n            } else {\n                snapBack();\n            }\n        });\n\n        btn.addEventListener('pointercancel', function() {\n            dragging = false;\n            snapBack();\n        });\n\n        btn.addEventListener('keydown', function(e) {\n            if (e.key === 'Enter' || e.key === ' ') {\n                e.preventDefault();\n                setActive(!active);\n            }\n        });\n\n        btn.addEventListener('click', function(e) {\n            if (suppressClick) {\n                suppressClick = false;\n                return;\n            }\n            if (!active) return;\n            e.preventDefault();\n            setActive(false);\n        });\n\n        \/\/ Direct Buy binding removed \u2014 handled by delegated listener below so dynamically\n        \/\/ injected Buy buttons (AJAX cart updates, variation reloads) also work.\n    });\n\n    \/\/ FIX 4: Delegated click handler for .kloktion-one-click__buy.\n    \/\/ Covers buttons present at init AND any injected later (AJAX \/ variation reloads).\n    document.addEventListener('click', function(e) {\n        var btn = e.target && e.target.closest ? e.target.closest('.kloktion-one-click__buy') : null;\n        if ( ! btn ) { return; }\n        if ( btn.hidden || btn.disabled ) { return; }\n        e.preventDefault();\n        \/\/ Walk up to find the matching slider container and call its fireBuy.\n        \/\/ Each slider instance stores fireBuy on the container via data attr for delegation.\n        var container = btn.closest('.kloktion-one-click');\n        if ( container && typeof container._kloktionFireBuy === 'function' ) {\n            container._kloktionFireBuy();\n        }\n    }, false);\n\n    function showCardPopup(fallbackWalletUrl, onSuccessCallback) {\n        var existing = document.querySelector('.kloktion-popup-overlay');\n        if (existing) existing.remove();\n\n        var overlay = document.createElement('div');\n        overlay.className = 'kloktion-popup-overlay';\n        var i18n = (window.klokDA && window.klokDA.i18n) ? window.klokDA.i18n : ((window.kloctionData && window.kloctionData.i18n) ? window.kloctionData.i18n : {});\n        overlay.innerHTML =\n            '<div class=\"kloktion-popup-box\" role=\"dialog\" aria-modal=\"true\">' +\n                '<button class=\"kloktion-popup-close\" aria-label=\"Close\">&times;<\/button>' +\n                '<h3>' + (i18n.addCardTitle || 'Add your card to bid') + '<\/h3>' +\n                '<p class=\"kloktion-popup-desc\">' + (i18n.addCardDesc || 'Register a card to participate in auctions. Zero-euro authorization hold only.') + '<\/p>' +\n                '<div id=\"kloktion-inline-card-element\" class=\"kloktion-card-field\"><\/div>' +\n                '<div id=\"kloktion-inline-card-errors\" class=\"kloktion-card-errors\" role=\"alert\"><\/div>' +\n                '<button class=\"kloktion-popup-submit button\" type=\"button\">' + (i18n.saveCardBtn || 'Save card') + '<\/button>' +\n                '<p class=\"kloktion-popup-fallback\"><a href=\"' + fallbackWalletUrl + '\">' + (i18n.goToWallet || 'Or open My Wallet') + '<\/a><\/p>' +\n            '<\/div>';\n        document.body.appendChild(overlay);\n\n        overlay.querySelector('.kloktion-popup-close').addEventListener('click', function() { overlay.remove(); });\n        overlay.addEventListener('click', function(e) { if (e.target === overlay) overlay.remove(); });\n\n        var stripeKey = (window.klokDA && window.klokDA.stripePublishableKey) ? window.klokDA.stripePublishableKey :\n                        (window.kloctionData && window.kloctionData.stripePublishableKey) ? window.kloctionData.stripePublishableKey : '';\n        if (!stripeKey) {\n            console.warn('[Kloktion] stripePublishableKey missing from window.klokDA\/kloctionData \u2014 set in Kloktion Settings');\n            overlay.querySelector('.kloktion-popup-submit').style.display = 'none';\n            overlay.querySelector('#kloktion-inline-card-element').textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n            return;\n        }\n\n        var stripe = null;\n        var card = null;\n        var errorsEl = overlay.querySelector('#kloktion-inline-card-errors');\n        var submitBtn = overlay.querySelector('.kloktion-popup-submit');\n        var mountTarget = overlay.querySelector('#kloktion-inline-card-element');\n\n        \/\/ Stripe.js is loaded async \u2014 retry until available, cap at 5s.\n        var __klokPopupAttempts = 0;\n        (function waitForStripe() {\n            if (typeof window.Stripe === 'undefined') {\n                if (__klokPopupAttempts++ < 50) {\n                    setTimeout(waitForStripe, 100);\n                } else {\n                    console.warn('[Kloktion] Stripe.js failed to load within 5s');\n                    submitBtn.style.display = 'none';\n                    mountTarget.textContent = 'Card payment unavailable \u2014 please use the wallet link below.';\n                }\n                return;\n            }\n            try {\n                stripe = Stripe(stripeKey);\n                var elements = stripe.elements();\n                card = elements.create('card');\n                card.mount('#kloktion-inline-card-element');\n            } catch(mountErr) {\n                console.error('[Kloktion] Stripe Elements init failed:', mountErr);\n                mountTarget.textContent = 'Card input failed to load. Please use the wallet link below.';\n                submitBtn.style.display = 'none';\n            }\n        })();\n\n        submitBtn.addEventListener('click', async function() {\n            if (!stripe || !card) {\n                errorsEl.textContent = 'Card payment is still loading. Please wait a moment and try again.';\n                return;\n            }\n            submitBtn.disabled = true;\n            submitBtn.textContent = '...';\n            errorsEl.textContent = '';\n            var restRoot = (window.klokDA && window.klokDA.restRoot) ? window.klokDA.restRoot :\n                           (window.kloctionData && window.kloctionData.restRoot) ? window.kloctionData.restRoot : '\/wp-json\/';\n            var restNonce = (window.klokDA && window.klokDA.restNonce) ? window.klokDA.restNonce :\n                            (window.kloctionData && window.kloctionData.restNonce) ? window.kloctionData.restNonce : '';\n            try {\n                var siRes = await fetch(restRoot + 'kloktion\/v1\/card\/setup-intent', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce}\n                });\n                var siData = await siRes.json();\n                if (!siRes.ok || !siData.client_secret) {\n                    throw new Error(siData.message || 'Could not initialize card setup.');\n                }\n                var confirmRes = await stripe.confirmCardSetup(siData.client_secret, {\n                    payment_method: {card: card}\n                });\n                if (confirmRes.error) throw new Error(confirmRes.error.message);\n                var saveRes = await fetch(restRoot + 'kloktion\/v1\/card\/attach', {\n                    method: 'POST',\n                    headers: {'Content-Type': 'application\/json', 'X-WP-Nonce': restNonce},\n                    body: JSON.stringify({payment_method: confirmRes.setupIntent.payment_method})\n                });\n                if (!saveRes.ok) throw new Error('Could not save card.');\n                overlay.remove();\n                if (typeof onSuccessCallback === 'function') onSuccessCallback();\n            } catch(e) {\n                errorsEl.textContent = e.message || 'Something went wrong.';\n                submitBtn.disabled = false;\n                submitBtn.textContent = i18n.saveCardBtn || 'Save card';\n            }\n        });\n    }\n    \/\/ Option B: no page-load pre-solve timeout needed \u2014 Turnstile executes only when Buy Now is clicked.\n\n})();\n"},"result":null}
{"timestamp":"2026-06-04 12:49:13","ip":"2a01:4f8:110:1444::2","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-06-04 12:49:14","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/plugins\/kloktion-dutch-auction\/includes\/class-turnstile.php"},"result":null}
{"timestamp":"2026-06-04 12:49:14","ip":"2a01:4f8:110:1444::2","action":"file_read","params":{"path":"wp-content\/debug.log","tail":10},"result":null}
{"timestamp":"2026-08-31 17:51:37","ip":"78.46.49.27","action":"site_info","params":[],"result":null}
{"timestamp":"2026-08-31 17:51:48","ip":"78.46.49.27","action":"plugin_list","params":[],"result":null}
{"timestamp":"2026-09-06 09:09:54","ip":"78.46.49.27","action":"site_info","params":[],"result":null}
{"timestamp":"2026-09-30 15:50:05","ip":"78.46.49.27","action":"site_info","params":[],"result":null}
{"timestamp":"2026-10-07 22:17:08","ip":"78.46.49.27","action":"site_info","params":[],"result":null}
{"timestamp":"2026-10-07 22:17:17","ip":"78.46.49.27","action":"db_query","params":{"query":"SHOW TABLES LIKE '%postmeta'"},"result":null}
{"timestamp":"2026-10-07 22:17:17","ip":"78.46.49.27","action":"db_query","params":{"query":"SHOW TABLES LIKE '%postmeta'"},"result":"fatal: WPRC_Legacy::db_query(): Argument #1 ($query) must be of type string, array given, called in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5504"}
{"timestamp":"2026-10-07 22:17:21","ip":"78.46.49.27","action":"db_query","params":[],"result":null}
{"timestamp":"2026-10-07 22:17:21","ip":"78.46.49.27","action":"db_query","params":[],"result":"fatal: Too few arguments to function WPRC_Legacy::db_query(), 0 passed in \/home\/kloktig\/www-new\/sk.php(5) : eval()'d code on line 5501 and exactly 1 expected"}