<?php
/**
 * The application screen in wp-admin: answers grouped as the borrower saw
 * them, documents, masked SSN with a logged reveal, consent / delivery /
 * access logs, and actions (resend, email a resume link, revoke links).
 *
 * Replaces 2.6's "Application Data" box (which printed the SSN in clear) and
 * the raw Custom Fields box (which listed encrypted values and token hashes).
 *
 * @package mortgage_application
 */

namespace Mapp\Admin;

use Mapp\Application\Consent;
use Mapp\Application\Events;
use Mapp\Application\Repository;
use Mapp\Application\Tokens;
use Mapp\Files\Access;
use Mapp\Files\Store;
use Mapp\Integrations\Crm\Log;
use Mapp\LoanOfficers\LoanOfficers;
use Mapp\Notifications\Mailer;
use Mapp\Rest\Controller;
use Mapp\Schema\Schema;
use Mapp\Security\Crypto;

defined( 'ABSPATH' ) || exit;

class ApplicationView {

	/** Wire hooks. */
	public static function register() {
		add_action( 'add_meta_boxes_mortgage_application', array( __CLASS__, 'boxes' ), 20 );
		add_action( 'add_meta_boxes_mapp_file_uploads', array( __CLASS__, 'upload_boxes' ), 20 );
		add_filter( 'manage_mapp_file_uploads_posts_columns', array( __CLASS__, 'upload_columns' ), 20 );
		add_action( 'manage_mapp_file_uploads_posts_custom_column', array( __CLASS__, 'upload_column' ), 20, 2 );
		add_action( 'wp_ajax_mapp_reveal_ssn', array( __CLASS__, 'reveal_ssn' ) );
		add_action( 'admin_post_mapp_app_action', array( __CLASS__, 'handle_action' ) );
		add_filter( 'register_post_type_args', array( __CLASS__, 'no_custom_fields' ), 20, 2 );
		add_action( 'admin_notices', array( __CLASS__, 'action_notice' ) );
	}

	/**
	 * @param array  $args      Args.
	 * @param string $post_type Post type.
	 * @return array
	 */
	public static function no_custom_fields( $args, $post_type ) {
		if ( 'mortgage_application' === $post_type && isset( $args['supports'] ) ) {
			$args['supports'] = array_values( array_diff( (array) $args['supports'], array( 'custom-fields' ) ) );
		}
		return $args;
	}

	/** @return bool Whether GHL is on (Premium with an active license). */
	private static function ghl_on() {
		return false !== has_action( 'mapp_milestone', array( 'Mapp\Integrations\Crm\Crm', 'on_milestone' ) );
	}

	/** Swap meta boxes. */
	public static function boxes() {
		foreach ( array( 'normal', 'advanced', 'side' ) as $context ) {
			remove_meta_box( 'postcustom', 'mortgage_application', $context );
		}
		add_meta_box( 'mapp_answers', __( 'Application', '1003-mortgage-application' ), array( __CLASS__, 'render_answers' ), 'mortgage_application', 'normal', 'high' );
		add_meta_box( 'mapp_documents', __( 'Documents', '1003-mortgage-application' ), array( __CLASS__, 'render_documents' ), 'mortgage_application', 'normal', 'default' );
		add_meta_box( 'mapp_activity', __( 'Activity', '1003-mortgage-application' ), array( __CLASS__, 'render_activity' ), 'mortgage_application', 'normal', 'low' );
		add_meta_box( 'mapp_actions', __( 'Status and actions', '1003-mortgage-application' ), array( __CLASS__, 'render_actions' ), 'mortgage_application', 'side', 'high' );
	}

	/** Upload records get the documents and activity boxes. */
	public static function upload_boxes() {
		add_meta_box( 'mapp_documents', __( 'Documents', '1003-mortgage-application' ), array( __CLASS__, 'render_documents' ), 'mapp_file_uploads', 'normal', 'high' );
		add_meta_box( 'mapp_activity', __( 'Activity', '1003-mortgage-application' ), array( __CLASS__, 'render_activity' ), 'mapp_file_uploads', 'normal', 'low' );
	}

	/**
	 * @param \WP_Post $post Post.
	 */
	public static function render_answers( $post ) {
		$id      = (int) $post->ID;
		$answers = Repository::answers( $id, false );
		$groups  = array(
			'short'   => __( 'Short application', '1003-mortgage-application' ),
			'contact' => __( 'Contact', '1003-mortgage-application' ),
			'final'   => __( 'Final questions', '1003-mortgage-application' ),
			'full'    => __( 'Full 1003', '1003-mortgage-application' ),
		);
		foreach ( $groups as $stage => $title ) {
			$rows = '';
			foreach ( Schema::questions_in( $stage ) as $key => $def ) {
				if ( ! empty( $def['sensitive'] ) ) {
					$stored = (string) get_post_meta( $id, $key, true );
					if ( '' === $stored ) {
						continue;
					}
					$reveal = self::can_reveal()
						? ' <button type="button" class="button-link mapp-reveal" data-key="' . esc_attr( $key ) . '">' . esc_html__( 'Reveal', '1003-mortgage-application' ) . '</button>'
						: ' <span class="description">' . esc_html__( '(administrators can reveal)', '1003-mortgage-application' ) . '</span>';
					$rows  .= '<tr><th>' . esc_html( Schema::text( $def['label'] ) ) . '</th><td><span class="mapp-ssn" data-key="' . esc_attr( $key ) . '">•••-••-••••</span>' . $reveal . '</td></tr>';
					continue;
				}
				if ( ! isset( $answers[ $key ] ) ) {
					continue;
				}
				$value = Schema::display_value( $key, $answers[ $key ] );
				if ( '' === $value ) {
					continue;
				}
				// Short LO labels; consent wording lives in the consent log.
				$label = Schema::admin_label( $key );
				$rows .= '<tr><th>' . esc_html( $label ) . '</th><td>' . esc_html( $value ) . '</td></tr>';
			}
			if ( $rows ) {
				echo '<h4 class="mapp-kv-title">' . esc_html( $title ) . '</h4><table class="mapp-kv">' . $rows . '</table>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- rows escaped above.
			}
		}
		// 2.6 fields no longer asked, shown when present on older applications.
		$legacy = '';
		foreach ( Schema::questions() as $key => $def ) {
			if ( empty( $def['legacy'] ) ) {
				continue;
			}
			$value = get_post_meta( $id, $key, true );
			if ( '' !== $value && null !== $value ) {
				$legacy .= '<tr><th>' . esc_html( Schema::text( $def['label'] ) ) . '</th><td>' . esc_html( is_scalar( $value ) ? $value : wp_json_encode( $value ) ) . '</td></tr>';
			}
		}
		if ( $legacy ) {
			echo '<h4 class="mapp-kv-title">' . esc_html__( 'Earlier version answers', '1003-mortgage-application' ) . '</h4><table class="mapp-kv">' . $legacy . '</table>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
		}
		$nonce = wp_create_nonce( 'mapp_reveal_' . $id );
		?>
		<script>
		document.addEventListener('click', function (e) {
			var b = e.target.closest('.mapp-reveal');
			if (!b) return;
			if (!confirm(<?php echo wp_json_encode( __( 'Reveal this Social Security number? The view is logged.', '1003-mortgage-application' ) ); ?>)) return;
			var body = new FormData();
			body.append('action', 'mapp_reveal_ssn'); body.append('post', '<?php echo (int) $id; ?>'); body.append('key', b.getAttribute('data-key')); body.append('_wpnonce', '<?php echo esc_js( $nonce ); ?>');
			fetch(ajaxurl, { method: 'POST', body: body, credentials: 'same-origin' }).then(function (r) { return r.json(); }).then(function (j) {
				var s = document.querySelector('.mapp-ssn[data-key="' + b.getAttribute('data-key') + '"]');
				if (j.success && s) { s.textContent = j.data; b.remove(); }
			});
		});
		</script>
		<?php
	}

	/**
	 * SSN reveal is for administrators only (manage_options; on multisite the
	 * site's administrators). Filter mapp_reveal_ssn_capability to change it.
	 *
	 * @return bool
	 */
	public static function can_reveal() {
		return current_user_can( (string) apply_filters( 'mapp_reveal_ssn_capability', 'manage_options' ) );
	}

	/** AJAX: reveal one SSN (logged). */
	public static function reveal_ssn() {
		$id  = isset( $_POST['post'] ) ? (int) $_POST['post'] : 0;
		$key = isset( $_POST['key'] ) ? sanitize_key( wp_unslash( $_POST['key'] ) ) : '';
		check_ajax_referer( 'mapp_reveal_' . $id );
		$def = Schema::question( $key );
		if ( ! $id || ! $def || empty( $def['sensitive'] ) || ! self::can_reveal() || ! Repository::exists( $id ) ) {
			wp_send_json_error( null, 403 );
		}
		$plain = Crypto::read_ssn( (string) get_post_meta( $id, $key, true ) );
		Access::log( $id, 'reveal_ssn', $key, 'user:' . get_current_user_id() );
		wp_send_json_success( '' !== $plain ? substr( $plain, 0, 3 ) . '-' . substr( $plain, 3, 2 ) . '-' . substr( $plain, 5 ) : __( 'Unreadable', '1003-mortgage-application' ) );
	}

	/**
	 * @param \WP_Post $post Post.
	 */
	public static function render_documents( $post ) {
		$nonce = wp_create_nonce( 'wp_rest' );
		if ( Store::UPLOAD_POST_TYPE === $post->post_type ) {
			self::render_upload_link( $post );
		}
		$files = Store::files_for( $post->ID );
		if ( ! $files ) {
			echo '<p>' . esc_html__( 'No documents uploaded with the application.', '1003-mortgage-application' ) . '</p>';
		} else {
			self::files_table( $post->ID, $files, $nonce );
		}
		if ( 'mortgage_application' === $post->post_type ) {
			self::render_linked_uploads( $post->ID, $nonce );
		}
	}

	/**
	 * Upload-page records matched to this application by email.
	 *
	 * @param int    $app_id Application ID.
	 * @param string $nonce  REST nonce.
	 */
	private static function render_linked_uploads( $app_id, $nonce ) {
		// The upload page is a Pro feature; the free build has no Portal.
		$uploads = class_exists( '\Mapp\Files\Portal' ) ? \Mapp\Files\Portal::linked_uploads( $app_id ) : array();
		if ( ! $uploads ) {
			return;
		}
		echo '<h4 class="mapp-kv-title">' . esc_html__( 'From the upload page (not verified)', '1003-mortgage-application' ) . '</h4>';
		echo '<p class="description">' . esc_html__( 'Sent from the document upload page with this application\'s email. Anyone who knows the email can use that page, so confirm with the borrower before relying on these.', '1003-mortgage-application' ) . '</p>';
		foreach ( $uploads as $upload_id ) {
			$files = Store::files_for( $upload_id );
			if ( ! $files ) {
				continue;
			}
			$lo = (int) get_post_meta( $upload_id, 'mapp_lo_id', true );
			echo '<p style="margin:12px 0 6px"><a href="' . esc_url( get_edit_post_link( $upload_id ) ) . '">' . esc_html( get_the_title( $upload_id ) ) . '</a> <span class="description">' . esc_html( (string) get_post_meta( $upload_id, 'file_uploads_email', true ) . ( $lo ? ' · ' . sprintf( /* translators: %s: LO */ __( 'sent to %s', '1003-mortgage-application' ), get_the_title( $lo ) ) : '' ) ) . '</span></p>';
			self::files_table( $upload_id, $files, $nonce );
		}
	}

	/**
	 * File Uploads list: which application and LO each upload went to.
	 *
	 * @param array $columns Columns.
	 * @return array
	 */
	public static function upload_columns( $columns ) {
		$out = array();
		foreach ( $columns as $key => $label ) {
			$out[ $key ] = $label;
			if ( 'title' === $key ) {
				$out['mapp_upload_app'] = __( 'Application', '1003-mortgage-application' );
				$out['mapp_upload_lo']  = __( 'Loan officer', '1003-mortgage-application' );
			}
		}
		return $out;
	}

	/**
	 * @param string $column  Column.
	 * @param int    $post_id Upload record ID.
	 */
	public static function upload_column( $column, $post_id ) {
		if ( 'mapp_upload_app' === $column ) {
			$app_id = (int) get_post_meta( $post_id, 'mapp_application_id', true );
			echo $app_id ? '<a href="' . esc_url( get_edit_post_link( $app_id ) ) . '">' . esc_html( get_the_title( $app_id ) ) . '</a>' : '—';
		} elseif ( 'mapp_upload_lo' === $column ) {
			$lo = (int) get_post_meta( $post_id, 'mapp_lo_id', true );
			echo esc_html( $lo ? get_the_title( $lo ) : '—' );
		}
	}

	/**
	 * On an upload record: the application it was matched to.
	 *
	 * @param \WP_Post $post Upload record.
	 */
	private static function render_upload_link( $post ) {
		$app_id = (int) get_post_meta( $post->ID, 'mapp_application_id', true );
		$lo     = (int) get_post_meta( $post->ID, 'mapp_lo_id', true );
		echo '<dl class="mapp-status" style="margin:8px 0 16px">';
		echo '<dt>' . esc_html__( 'Application', '1003-mortgage-application' ) . '</dt><dd>' . ( $app_id ? '<a href="' . esc_url( get_edit_post_link( $app_id ) ) . '">' . esc_html( get_the_title( $app_id ) ) . '</a> <span class="description">' . esc_html__( '(matched by email, not verified)', '1003-mortgage-application' ) . '</span>' : esc_html__( 'None uses this email', '1003-mortgage-application' ) ) . '</dd>';
		echo '<dt>' . esc_html__( 'Loan officer', '1003-mortgage-application' ) . '</dt><dd>' . esc_html( $lo ? get_the_title( $lo ) . ( 'yes' === get_post_meta( $post->ID, 'mapp_lo_chosen', true ) ? ' ' . __( '(chosen by the borrower)', '1003-mortgage-application' ) : '' ) : __( 'Office recipients', '1003-mortgage-application' ) ) . '</dd>';
		echo '</dl>';
	}

	/**
	 * @param int    $id       Record holding the files.
	 * @param array  $files    Files.
	 * @param string $nonce    REST nonce.
	 */
	private static function files_table( $id, $files, $nonce ) {
		$ghl = self::ghl_on();
		echo '<table class="widefat striped"><thead><tr><th>' . esc_html__( 'File', '1003-mortgage-application' ) . '</th><th>' . esc_html__( 'For', '1003-mortgage-application' ) . '</th><th>' . esc_html__( 'Uploaded', '1003-mortgage-application' ) . '</th>' . ( $ghl ? '<th>' . esc_html__( 'GHL', '1003-mortgage-application' ) . '</th>' : '' ) . '<th>' . esc_html__( 'Downloads', '1003-mortgage-application' ) . '</th></tr></thead><tbody>';
		foreach ( $files as $file_id => $file ) {
			$url = add_query_arg( '_wpnonce', $nonce, rest_url( 'mapp/v1/files/' . (int) $id . '/' . rawurlencode( $file_id ) ) );
			printf(
				'<tr><td><a href="%s">%s</a> <span class="description">%s</span></td><td>%s</td><td>%s</td>%s<td>%d</td></tr>',
				esc_url( $url ),
				esc_html( $file['name'] ),
				esc_html( size_format( $file['size'] ) ),
				esc_html( self::doc_label( $file['doc_type'] ) ),
				esc_html( self::date( $file['uploaded'] ) ),
				$ghl ? '<td>' . esc_html( isset( $file['crm_sent'] ) ? ( 'upload' === $file['crm_sent'] ? __( 'Attached', '1003-mortgage-application' ) : __( 'Link in note', '1003-mortgage-application' ) ) : '—' ) . '</td>' : '', // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- escaped here.
				(int) $file['downloads']
			);
		}
		echo '</tbody></table>';
	}

	/**
	 * @param \WP_Post $post Post.
	 */
	public static function render_activity( $post ) {
		$sections = array(
			__( 'Deliveries', '1003-mortgage-application' ) => array_map(
				function ( $e ) {
					return array( self::date( $e['time'] ), $e['action'] . ' · ' . $e['milestone'], $e['error'] ? $e['error'] : ( $e['code'] ? 'OK (' . $e['code'] . ')' : 'OK' ) );
				},
				Log::entries( $post->ID )
			),
			__( 'Consent', '1003-mortgage-application' ) => array_map(
				function ( $e ) {
					return array( self::date( $e['time'] ), $e['kind'] . ( $e['given'] ? '' : ' (withdrawn)' ) . ' · ' . $e['ip'], $e['text'] );
				},
				Consent::entries( $post->ID )
			),
			__( 'Access', '1003-mortgage-application' ) => array_map(
				function ( $e ) {
					$actor = $e['actor'];
					if ( 0 === strpos( $actor, 'user:' ) ) {
						$user  = get_userdata( (int) substr( $actor, 5 ) );
						$actor = $user ? $user->user_login : $actor;
					}
					return array( self::date( $e['time'] ), $e['action'] . ' · ' . $e['target'], $actor . ' · ' . $e['ip'] );
				},
				Access::entries( $post->ID )
			),
		);
		foreach ( $sections as $title => $rows ) {
			echo '<h4 class="mapp-kv-title">' . esc_html( $title ) . '</h4>';
			if ( ! $rows ) {
				echo '<p class="description">' . esc_html__( 'Nothing yet.', '1003-mortgage-application' ) . '</p>';
				continue;
			}
			echo '<table class="widefat striped"><tbody>';
			foreach ( array_reverse( $rows ) as $row ) {
				echo '<tr><td style="width:150px">' . esc_html( $row[0] ) . '</td><td style="width:30%">' . esc_html( $row[1] ) . '</td><td>' . esc_html( $row[2] ) . '</td></tr>';
			}
			echo '</tbody></table>';
		}
	}

	/**
	 * @param \WP_Post $post Post.
	 */
	public static function render_actions( $post ) {
		$id     = (int) $post->ID;
		$stage  = Repository::stage( $id );
		$labels = array(
			'started'        => __( 'Started (no contact details yet)', '1003-mortgage-application' ),
			'contact'        => __( 'In progress (contact saved)', '1003-mortgage-application' ),
			'submitted'      => __( 'Short app submitted', '1003-mortgage-application' ),
			'full_started'   => __( 'Full 1003 in progress', '1003-mortgage-application' ),
			'full_submitted' => __( 'Full 1003 submitted', '1003-mortgage-application' ),
		);
		$lo = LoanOfficers::profile( (int) get_post_meta( $id, 'mapp_lo_id', true ), true );
		echo '<p><strong>' . esc_html( isset( $labels[ $stage ] ) ? $labels[ $stage ] : $stage ) . '</strong><br>';
		echo esc_html__( 'Last step:', '1003-mortgage-application' ) . ' ' . esc_html( self::step_label( (string) get_post_meta( $id, 'mapp_last_step', true ) ) ) . '</p>';
		echo '<p>' . esc_html__( 'Loan officer:', '1003-mortgage-application' ) . ' ' . esc_html( $lo ? $lo['name'] : '—' ) . '<br>';
		$contact = (string) get_post_meta( $id, 'mapp_crm_contact_id', true );
		if ( self::ghl_on() || '' !== $contact ) {
			echo esc_html__( 'GHL contact:', '1003-mortgage-application' ) . ' ' . esc_html( '' !== $contact ? $contact : '—' ) . '<br>';
		}
		$source = (string) get_post_meta( $id, 'mapp_utm_source', true );
		echo esc_html__( 'Source:', '1003-mortgage-application' ) . ' ' . esc_html( '' !== $source ? $source : ( (string) get_post_meta( $id, 'mapp_referrer', true ) ?: '—' ) ) . '</p>';

		// Reminders: what went out, and what is next.
		$rem   = \Mapp\Application\Reminders::status( $id );
		$lines = array();
		foreach ( $rem['sent'] as $row ) {
			/* translators: 1: reminder, 2: date */
			$lines[] = sprintf( __( '%1$s sent %2$s', '1003-mortgage-application' ), $row[0], self::date( $row[1] ) );
		}
		if ( $rem['next'] ) {
			/* translators: 1: reminder, 2: date */
			$lines[] = sprintf( __( '%1$s due %2$s', '1003-mortgage-application' ), $rem['next_label'], self::date( max( $rem['next'], time() ) ) );
		}
		echo '<p>' . esc_html__( 'Reminders:', '1003-mortgage-application' ) . ' ' . ( $lines ? '<br>' . implode( '<br>', array_map( 'esc_html', $lines ) ) : esc_html__( 'none', '1003-mortgage-application' ) ) . '</p>';

		foreach (
			array(
				'resend' => __( 'Resend to emails and connected services', '1003-mortgage-application' ),
				'resume' => __( 'Email borrower a resume link', '1003-mortgage-application' ),
				'revoke' => __( 'Revoke resume links', '1003-mortgage-application' ),
			) as $do => $label
		) {
			$url     = wp_nonce_url( admin_url( 'admin-post.php?action=mapp_app_action&do=' . $do . '&post=' . $id ), 'mapp_app_action_' . $id );
			$confirm = array(
				'resend' => __( 'Send this application to the email recipients and connected services again? The borrower may get their receipt again.', '1003-mortgage-application' ),
				'revoke' => __( 'Stop every resume link for this application? The borrower will need a new link to continue.', '1003-mortgage-application' ),
			);
			$onclick = isset( $confirm[ $do ] ) ? ' onclick="return confirm(' . esc_attr( wp_json_encode( $confirm[ $do ] ) ) . ');"' : '';
			echo '<p><a class="button" href="' . esc_url( $url ) . '"' . $onclick . '>' . esc_html( $label ) . '</a></p>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- parts escaped above.
		}
	}

	/** admin-post handler for the action buttons. */
	public static function handle_action() {
		$id = isset( $_GET['post'] ) ? (int) $_GET['post'] : 0;
		check_admin_referer( 'mapp_app_action_' . $id );
		if ( ! $id || ! current_user_can( 'edit_post', $id ) || ! Repository::exists( $id ) ) {
			wp_die( esc_html__( 'Not allowed.', '1003-mortgage-application' ), 403 );
		}
		$do = isset( $_GET['do'] ) ? sanitize_key( wp_unslash( $_GET['do'] ) ) : '';
		switch ( $do ) {
			case 'resend':
				$stage = Repository::stage( $id );
				$map   = array(
					'contact'        => 'contact',
					'submitted'      => 'submitted',
					'full_started'   => 'submitted',
					'full_submitted' => 'full_submitted',
				);
				if ( isset( $map[ $stage ] ) ) {
					$m = $map[ $stage ];
					foreach ( array( 'mapp_milestone_', 'mapp_dispatched_', 'mapp_crm_note_', 'mapp_crm_sent_', 'mapp_crm_attempts_' ) as $prefix ) {
						delete_post_meta( $id, $prefix . $m );
					}
					// A fresh connector source_id, or the connector treats it as a duplicate.
					update_post_meta( $id, 'mapp_crm_resend_' . $m, (int) get_post_meta( $id, 'mapp_crm_resend_' . $m, true ) + 1 );
					Events::milestone( $id, $m );
				}
				break;
			case 'resume':
				Mailer::resume_link( $id, Controller::resume_url( $id, Tokens::issue( $id, 'link' ) ) );
				break;
			case 'revoke':
				Tokens::revoke_all( $id );
				break;
		}
		wp_safe_redirect( add_query_arg( 'mapp_done', $do, get_edit_post_link( $id, 'url' ) ) );
		exit;
	}

	/** Confirmation after an action. */
	public static function action_notice() {
		// phpcs:ignore WordPress.Security.NonceVerification.Recommended -- display only.
		$done = isset( $_GET['mapp_done'] ) ? sanitize_key( wp_unslash( $_GET['mapp_done'] ) ) : '';
		$text = array(
			'resend' => __( 'Queued: emails and connected services will run again.', '1003-mortgage-application' ),
			'resume' => __( 'Resume link emailed to the borrower.', '1003-mortgage-application' ),
			'revoke' => __( 'All resume links for this application now stop working.', '1003-mortgage-application' ),
		);
		if ( isset( $text[ $done ] ) ) {
			echo '<div class="notice notice-success is-dismissible"><p>' . esc_html( $text[ $done ] ) . '</p></div>';
		}
	}

	/**
	 * The form step an id refers to, in words.
	 *
	 * @param string $step Step id.
	 * @return string
	 */
	private static function step_label( $step ) {
		if ( '' === $step ) {
			return '—';
		}
		if ( 0 === strpos( $step, 'full_' ) ) {
			foreach ( Schema::get()['sections'] as $sec ) {
				if ( 'full_' . $sec['id'] === $step ) {
					return __( 'Full 1003', '1003-mortgage-application' ) . ': ' . Schema::text( $sec['title'] );
				}
			}
		}
		foreach ( Schema::get()['steps'] as $s ) {
			if ( $s['id'] !== $step ) {
				continue;
			}
			if ( ! empty( $s['title'] ) ) {
				return Schema::text( $s['title'] );
			}
			if ( ! empty( $s['questions'] ) ) {
				return Schema::admin_label( $s['questions'][0] );
			}
			$kinds = array(
				'reveal'  => __( 'Numbers screen', '1003-mortgage-application' ),
				'contact' => __( 'Contact details', '1003-mortgage-application' ),
			);
			return isset( $kinds[ $s['kind'] ] ) ? $kinds[ $s['kind'] ] : $step;
		}
		return $step;
	}

	/**
	 * Checklist item names (same list as the form).
	 *
	 * @param string $type Doc type.
	 * @return string
	 */
	private static function doc_label( $type ) {
		return Store::doc_label( $type );
	}

	/**
	 * MM-DD-YYYY h:mm am, site time.
	 *
	 * @param int $time Timestamp.
	 * @return string
	 */
	private static function date( $time ) {
		return $time ? wp_date( 'm-d-Y g:i a', (int) $time ) : '';
	}
}