native_dynamic_runtime.c

Go to the documentation of this file.

/**
 * @file
 * @brief In-process dynamic-app request handler for the Pharos native runtime.
 *
 * Replaces the former @c spawn_app_request() path for apps whose
 * @c host_profile is @c "dynamic-app".  Instead of forking a child
 * process, the request is handled entirely within the Pharos binary.
 *
 * Flow:
 *  1. Resolve the route fixture for the app.
 *  2. Attempt static-asset serving (static/, media/, well-known JSON).
 *  3. Match the request path against the declared route fixture.
 *  4. Dispatch page and action routes through the in-process handler.
 *  5. Fall back to the dispatch table for API-style routes.
 *  6. Return a 404 for unmatched paths.
 */
 
#include "native_dynamic_runtime.h"
#include "native_dynamic_dispatch.h"
#include "native_dynamic_media.h"
#include "native_dynamic_multipart.h"
#include "native_dynamic_request_fields.h"
#include "native_dynamic_relational.h"
#include "native_dynamic_template.h"
#include "native_yyjson_helpers.h"
 
#include "native_fs.h"
#include "native_http_response.h"
#include "native_support.h"
 
#include <stdlib.h>
#include <string.h>
#include <strings.h>
#include <stdio.h>
#include <stdint.h>
#include <time.h>
#include <stdarg.h>
#include <fcntl.h>
#ifndef _WIN32
#include <unistd.h>
#endif
 
/* ------------------------------------------------------------------ */
/* Constants                                                           */
/* ------------------------------------------------------------------ */
 
/** @brief Host profile string that triggers in-process dynamic handling. */
#define DYNAMIC_HOST_PROFILE "dynamic-app"
 
/** @brief Maximum query string length we process. */
#define MAX_QUERY_LEN 4096
 
/** @brief CSRF cookie name used by the Pharos framework. */
#define CSRF_COOKIE_NAME "pharos_csrf"
 
/** @brief Session cookie name used by the Pharos framework. */
#define SESSION_COOKIE_NAME "pharos_session"
 
/** @brief Maximum CSRF token length (24 bytes = 48 hex chars). */
#define CSRF_TOKEN_HEX_LEN 48
 
/** @brief CSRF cookie max-age in seconds. */
#define CSRF_COOKIE_MAX_AGE "7200"
 
/* ------------------------------------------------------------------ */
/* Internal helpers                                                    */
/* ------------------------------------------------------------------ */
 
static yyjson_val *state_array_runtime_local(yyjson_val *root, const char *field_name);
static yyjson_val *find_business_by_slug_runtime_local(yyjson_val *root, const char *business_slug);
static yyjson_val *find_business_by_id_runtime_local(yyjson_val *root, long business_id);
static yyjson_val *find_user_by_id_runtime_local(yyjson_val *root, long user_id);
static int long_from_value_runtime_local(yyjson_val *value, long *out_value);
static yyjson_val *find_service_for_business_runtime_local(yyjson_val *root, long service_id, long business_id);
static yyjson_val *find_appointment_by_id_runtime_local(yyjson_val *root, long appointment_id);
static char *page_title_dup_runtime(yyjson_val *page_spec_root, yyjson_val *body_params_root);
static char *generated_surface_fixture_path_dup_runtime(const AppRuntime *app);
static char *request_path_dup_runtime(const HttpRequest *request);
static char *generated_admin_manage_page_params_json_dup_runtime(const char *state_path, const char *business_slug, const char *surface_kind, const char *error_text);
static char *business_availability_edit_page_params_json_dup_runtime(const char *state_path, const char *business_slug, long availability_id, const char *error_text);
static char *profile_page_params_json_dup_runtime_local(const char *state_path, long user_id, const char *payment_preference_options_html);
static yyjson_val *proof_state_root_load_runtime(const char *state_path, yyjson_doc **doc_out);
static char *proof_home_page_params_json_dup_runtime(const char *state_path);
static int write_proof_state_api_response(NativeConnection *connection, const char *state_path);
static int text_append_format_runtime_local(char **buffer, size_t *length, size_t *capacity, const char *format, ...);
static char *register_page_params_json_dup_runtime(const char *query_string);
 
typedef struct {
  const char *surface_kind;
  const char *resource_collection_name;
  const char *surface_path_segment;
  const char *surface_title;
  const char *surface_intro;
  const char *filter_title;
  const char *sort_options_html;
  const char *records_title;
  const char *header_html;
  const char *create_title;
  const char *create_button_label;
  const char *empty_state_row_html;
  const char *default_filter_controls_html;
} GeneratedAdminSurfaceDescriptor;
 
static const GeneratedAdminSurfaceDescriptor *generated_admin_surface_descriptor_runtime(const char *surface_kind);
static int append_generated_admin_surface_rows_runtime(
  const GeneratedAdminSurfaceDescriptor *descriptor,
  yyjson_val *root,
  long business_id,
  const char *business_slug,
  char **row_html,
  size_t *row_html_length,
  size_t *row_html_capacity
);
static int append_generated_admin_surface_form_fields_runtime(
  const GeneratedAdminSurfaceDescriptor *descriptor,
  char **form_fields_html,
  size_t *form_fields_length,
  size_t *form_fields_capacity,
  const char *day_options_html
);
static char *generated_admin_surface_filter_controls_dup_runtime(
  const GeneratedAdminSurfaceDescriptor *descriptor
);
static void generated_admin_surface_page_copy_runtime(
  yyjson_mut_doc *doc,
  yyjson_mut_val *page,
  const GeneratedAdminSurfaceDescriptor *descriptor,
  const char *filter_controls_html
);
static char *password_reset_request_page_params_json_dup_runtime(void);
static char *password_reset_sent_page_params_json_dup_runtime(const char *preview_path);
static char *password_reset_complete_page_params_json_dup_runtime(const char *request_path);
static char *invite_created_page_params_json_dup_runtime(const char *invite_email, const char *invite_path, const char *return_path);
static char *invite_accept_page_params_json_dup_runtime(const char *invite_kind, const char *target_business_name, const char *error_message, const char *invite_email, const char *form_action);
static char *invite_accept_done_page_params_json_dup_runtime(const char *continue_path);
static char *service_edit_page_params_json_dup_runtime(const char *state_path, const char *business_slug, long service_id);
char *business_landing_render_page_params_json_dup_runtime(const char *state_path, const char *business_slug, long user_id, const char *app_root);
char *business_calendar_render_page_params_json_dup_runtime(const char *state_path, const char *business_slug, const char *app_root, const char *selected_year_text, const char *selected_month_text, const char *selected_date_text);
char *diagnostics_render_page_params_json_dup_runtime(const char *state_path);
static unsigned char *request_body_bytes_dup_runtime(const HttpRequest *request, size_t *out_size);
 
typedef struct {
  char *resource_slug;
  char *resource_name;
} ResourceLinkDisplay;
 
static int resource_link_display_load_runtime(
  yyjson_val *root,
  const char *resource_collection_name,
  long resource_id,
  ResourceLinkDisplay *display
);
static void resource_link_display_free_runtime(ResourceLinkDisplay *display);
static int append_profile_subscription_rows_runtime(
  yyjson_val *root,
  long user_id,
  char **subscriptions_block,
  size_t *subscriptions_length,
  size_t *subscriptions_capacity
);
static char *profile_subscriptions_block_dup_runtime(yyjson_val *root, long user_id);
static int runtime_page_params_add_string_runtime(
  yyjson_mut_doc *doc,
  yyjson_mut_val *root,
  const char *key,
  const char *value
);
static int runtime_page_params_add_escaped_string_runtime(
  yyjson_mut_doc *doc,
  yyjson_mut_val *root,
  const char *key,
  const char *value
);
static char *runtime_page_params_write_runtime(yyjson_mut_doc *doc, yyjson_mut_val *root);
static char *password_reset_preview_html_dup_runtime(const char *preview_path);
static char *invite_accept_target_html_dup_runtime(const char *target_business_name);
static char *request_form_value_dup_runtime(const HttpRequest *request, const char *field_name);
static char *password_hash_dup_runtime(const char *password_value);
static char *resolve_declared_page_params_json_runtime(
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match,
  const char *request_path,
  const char *query_string,
  long active_user_id
);
static char *resolve_invite_accept_page_params_json_runtime(
  const AppRuntime *app,
  const NativeDynamicRouteMatch *match,
  const char *request_path
);
static int handle_password_reset_request_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request
);
static int handle_password_reset_complete_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
);
static int handle_issue_business_invite_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
);
static int handle_accept_invite_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
);
static long state_tenant_id_for_business_runtime_local(yyjson_val *root, long business_id);
static int user_has_active_tenant_membership_runtime_local(yyjson_val *root, long user_id, long tenant_id);
static const char *membership_role_id_for_invite_runtime_local(const char *role_hint, const char *account_type);
static int persist_app_state_text_runtime_local(const AppRuntime *app, const char *state_json_text);
static int append_rate_limit_event_runtime_local(const AppRuntime *app, const char *policy_key, const char *bucket_key, const char *outcome);
static int render_declared_page_response_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const char *page_id,
  const char *request_path,
  const char *body_params_json
);
 
/**
 * @brief Writes a JSON error response to a connection.
 *
 * @param connection  Connection to write to.
 * @param status      HTTP status code.
 * @param status_text HTTP reason phrase.
 * @param error_kind  Machine-readable error kind.
 * @param message     Human-readable error message.
 */
static void write_json_error(
  NativeConnection *connection,
  int status,
  const char *status_text,
  const char *error_kind,
  const char *message
) {
  char body[1024];
  int written;
 
  written = snprintf(body, sizeof(body),
    "{\"error\":\"%s\",\"message\":\"%s\"}",
    error_kind != NULL ? error_kind : "error",
    message != NULL ? message : "An error occurred"
  );
  if (written < 0 || (size_t)written >= sizeof(body)) {
    native_send_text_response(connection, 500, "Internal Server Error", "response formatting error\n");
    return;
  }
  native_connection_printf(
    connection,
    "HTTP/1.1 %d %s\r\n"
    "Content-Type: application/json\r\n"
    "Content-Length: %d\r\n"
    "Connection: close\r\n"
    "\r\n%s",
    status,
    status_text,
    written,
    body
  );
}
 
/**
 * @brief Generates a random hex token for CSRF protection.
 *
 * Produces @p byte_count random bytes encoded as hex (so the
 * returned string is @p byte_count * 2 characters long).
 *
 * @param buf      Destination buffer (must be at least byte_count*2+1).
 * @param byte_count  Number of random bytes to generate.
 */
static void csrf_generate_random_hex(char *buf, size_t byte_count) {
  static const char hex[] = "0123456789abcdef";
  size_t i;
  unsigned char raw[48];
  if (byte_count > sizeof(raw)) {
    byte_count = sizeof(raw);
  }
  {
    int fd = open("/dev/urandom", O_RDONLY);
    if (fd >= 0) {
      size_t got = 0;
      while (got < byte_count) {
        ssize_t n = read(fd, raw + got, byte_count - got);
        if (n <= 0) break;
        got += (size_t)n;
      }
      close(fd);
    }
  }
  for (i = 0; i < byte_count; i++) {
    buf[i * 2]     = hex[(raw[i] >> 4) & 0x0f];
    buf[i * 2 + 1] = hex[raw[i] & 0x0f];
  }
  buf[byte_count * 2] = '\0';
}
 
/**
 * @brief Extracts the CSRF token from the request cookie header.
 *
 * @param cookie_header  Raw Cookie header value, or NULL.
 * @return Newly allocated token string, or NULL if not found.
 *         Caller must free.
 */
static char *csrf_token_from_cookie(const char *cookie_header) {
  return native_dynamic_cookie_value(cookie_header, CSRF_COOKIE_NAME);
}
 
/**
 * @brief Returns the CSRF token to use for a response.
 *
 * Reads the token from the request cookie.  If absent, generates
 * a new random token.
 *
 * @param cookie_header  Raw Cookie header value, or NULL.
 * @return Newly allocated token string.  Caller must free.
 */
static char *csrf_token_for_response(const char *cookie_header) {
  char *existing = csrf_token_from_cookie(cookie_header);
  if (existing != NULL && existing[0] != '\0') {
    return existing;
  }
  free(existing);
  {
    char *token = (char *)malloc(CSRF_TOKEN_HEX_LEN + 1);
    if (token != NULL) {
      csrf_generate_random_hex(token, 24);
    }
    return token;
  }
}
 
static int request_has_session_cookie(const char *cookie_header) {
  char *session_token = native_dynamic_cookie_value(cookie_header, SESSION_COOKIE_NAME);
  int has_session = session_token != NULL && session_token[0] != '\0';
  free(session_token);
  return has_session;
}
 
static char *request_header_value_dup_runtime(const char *headers, const char *header_name) {
  size_t name_len = 0;
  const char *cursor = headers;
  if (headers == NULL || header_name == NULL || header_name[0] == '\0') {
    return NULL;
  }
  name_len = strlen(header_name);
  while (*cursor != '\0') {
    const char *line_end = strchr(cursor, '\n');
    size_t line_len = line_end != NULL ? (size_t)(line_end - cursor) : strlen(cursor);
    if (line_len > name_len + 1 && strncasecmp(cursor, header_name, name_len) == 0 && cursor[name_len] == ':') {
      const char *value_start = cursor + name_len + 1;
      const char *value_end = cursor + line_len;
      while (value_start < value_end && (*value_start == ' ' || *value_start == '\t')) {
        value_start++;
      }
      while (value_end > value_start && (value_end[-1] == ' ' || value_end[-1] == '\t' || value_end[-1] == '\r')) {
        value_end--;
      }
      return dup_range(value_start, (size_t)(value_end - value_start));
    }
    cursor = line_end != NULL ? line_end + 1 : cursor + line_len;
  }
  return NULL;
}
 
static char *csrf_request_token_dup_runtime(const HttpRequest *request, const char *form_body) {
  char *token = native_dynamic_form_value(form_body != NULL ? form_body : "", "csrf_token");
  if (token != NULL && token[0] != '\0') {
    return token;
  }
  free(token);
  return request_header_value_dup_runtime(request != NULL ? request->headers : NULL, "X-CSRF-Token");
}
 
static int csrf_request_valid_runtime(const HttpRequest *request, const char *form_body) {
  char *cookie_token = csrf_token_from_cookie(request != NULL ? request->cookie : NULL);
  char *request_token = csrf_request_token_dup_runtime(request, form_body);
  int valid = cookie_token != NULL && request_token != NULL && cookie_token[0] != '\0' && request_token[0] != '\0' && streq(cookie_token, request_token);
  free(cookie_token);
  free(request_token);
  return valid;
}
 
static char *payment_preference_options_html_dup_runtime(const char *selected_value) {
  static const struct {
    const char *value;
    const char *label;
  } options[] = {
    {"pay_on_site", "Pay on site"},
    {"credit_card", "Credit card"}
  };
  char *html = NULL;
  size_t capacity = 256;
  size_t length = 0;
  size_t index = 0;
 
  html = (char *)malloc(capacity);
  if (html == NULL) {
    return NULL;
  }
  html[0] = '\0';
 
  for (index = 0; index < (sizeof(options) / sizeof(options[0])); index++) {
    const char *selected_attr = (selected_value != NULL && streq(selected_value, options[index].value)) ? " selected" : "";
    int written = snprintf(
      html + length,
      capacity - length,
      "<option value=\"%s\"%s>%s</option>",
      options[index].value,
      selected_attr,
      options[index].label
    );
    if (written < 0) {
      free(html);
      return NULL;
    }
    if ((size_t)written >= capacity - length) {
      size_t new_capacity = capacity * 2 + (size_t)written + 1;
      char *grown = (char *)realloc(html, new_capacity);
      if (grown == NULL) {
        free(html);
        return NULL;
      }
      html = grown;
      capacity = new_capacity;
      written = snprintf(
        html + length,
        capacity - length,
        "<option value=\"%s\"%s>%s</option>",
        options[index].value,
        selected_attr,
        options[index].label
      );
      if (written < 0 || (size_t)written >= capacity - length) {
        free(html);
        return NULL;
      }
    }
    length += (size_t)written;
  }
 
  return html;
}
 
static char *request_body_text_dup_runtime(const HttpRequest *request) {
  if (request == NULL) {
    return strdup("");
  }
  if (request->body != NULL) {
    return strdup(request->body);
  }
  if (request->body_file_path != NULL && request->body_file_path[0] != '\0') {
    char *body_text = read_file_text(request->body_file_path);
    if (body_text != NULL) {
      return body_text;
    }
  }
  return strdup("");
}
 
static unsigned char *request_body_bytes_dup_runtime(const HttpRequest *request, size_t *out_size) {
  if (out_size != NULL) {
    *out_size = 0;
  }
  if (request == NULL) {
    return NULL;
  }
  if (request->body_file_path != NULL && request->body_file_path[0] != '\0') {
    return read_file_bytes_dup_runtime(request->body_file_path, out_size);
  }
  if (request->body != NULL) {
    unsigned char *copy = (unsigned char *)malloc(request->body_len + 1);
    if (copy == NULL) {
      return NULL;
    }
    memcpy(copy, request->body, request->body_len);
    copy[request->body_len] = '\0';
    if (out_size != NULL) {
      *out_size = request->body_len;
    }
    return copy;
  }
  return NULL;
}
 
static char *request_form_value_dup_runtime(const HttpRequest *request, const char *field_name) {
  if (field_name == NULL || field_name[0] == '\0') {
    return NULL;
  }
  if (request != NULL && request->is_multipart) {
    size_t body_len = 0;
    unsigned char *body_bytes = request_body_bytes_dup_runtime(request, &body_len);
    char *value = NULL;
    if (body_bytes != NULL) {
      value = native_dynamic_multipart_extract_text(body_bytes, body_len, request->content_type, field_name);
      free(body_bytes);
      if (value != NULL) {
        return value;
      }
    }
  }
  {
    char *form_body = request_body_text_dup_runtime(request);
    char *value = native_dynamic_form_value(form_body != NULL ? form_body : "", field_name);
    free(form_body);
    return value;
  }
}
 
static char *request_path_dup_runtime(const HttpRequest *request) {
  const char *target = request != NULL && request->target != NULL ? request->target : "/";
  const char *qmark = strchr(target, '?');
  size_t path_len = qmark != NULL ? (size_t)(qmark - target) : strlen(target);
  return dup_range(target, path_len);
}
 
static char *route_request_path_dup_runtime(const AppRuntime *app, const HttpRequest *request) {
  char *full_path = request_path_dup_runtime(request);
  const char *base_path = app != NULL ? app->base_path : NULL;
  if (full_path == NULL) {
    return NULL;
  }
  if (base_path == NULL || base_path[0] == '\0' || streq(base_path, "/")) {
    return full_path;
  }
  {
    size_t base_len = strlen(base_path);
    if (strncmp(full_path, base_path, base_len) == 0) {
      const char *suffix = full_path + base_len;
      char *trimmed = NULL;
      if (*suffix == '\0') {
        free(full_path);
        return strdup("/");
      }
      if (*suffix == '/') {
        trimmed = strdup(suffix);
        free(full_path);
        return trimmed;
      }
    }
  }
  return full_path;
}
 
static char *proof_state_seed_json_dup_runtime(void) {
  return strdup(
    "{\"schema\":\"pharos.dynamic_app_state.v1\",\"next_id\":3,\"last_action\":\"seeded\",\"items\":[{\"id\":1,\"done\":true,\"title\":\"Confirm dynamic host build path\"},{\"id\":2,\"done\":false,\"title\":\"Create a task through the compiled host\"}]}"
  );
}
 
static yyjson_val *proof_state_root_load_runtime(const char *state_path, yyjson_doc **doc_out) {
  yyjson_doc *doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *items = NULL;
  char *seed_json = NULL;
  if (doc_out != NULL) {
    *doc_out = NULL;
  }
  if (state_path == NULL || state_path[0] == '\0') {
    return NULL;
  }
  doc = native_json_doc_load_file(state_path);
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  items = root != NULL ? native_json_obj_get(root, "items") : NULL;
  if (root != NULL && yyjson_is_obj(root) && items != NULL && yyjson_is_arr(items)) {
    if (doc_out != NULL) {
      *doc_out = doc;
    }
    return root;
  }
  native_json_doc_free(doc);
  seed_json = proof_state_seed_json_dup_runtime();
  if (seed_json == NULL || write_text_file(state_path, seed_json) != 0) {
    free(seed_json);
    return NULL;
  }
  free(seed_json);
  doc = native_json_doc_load_file(state_path);
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  items = root != NULL ? native_json_obj_get(root, "items") : NULL;
  if (root == NULL || !yyjson_is_obj(root) || items == NULL || !yyjson_is_arr(items)) {
    native_json_doc_free(doc);
    return NULL;
  }
  if (doc_out != NULL) {
    *doc_out = doc;
  }
  return root;
}
 
static char *proof_task_items_html_dup_runtime(yyjson_val *items) {
  yyjson_arr_iter iter;
  yyjson_val *item = NULL;
  char *html = NULL;
  size_t length = 0;
  size_t capacity = 0;
  int has_items = 0;
  if (items != NULL && yyjson_is_arr(items) && yyjson_arr_iter_init(items, &iter)) {
    while ((item = yyjson_arr_iter_next(&iter)) != NULL) {
      long task_id = 0;
      int done = 0;
      char *title = NULL;
      char *title_html = NULL;
      task_id = native_json_obj_get_long_default(item, "id", 0, NULL);
      done = yyjson_get_bool(native_json_obj_get(item, "done"));
      title = native_json_obj_get_string_dup(item, "title");
      title_html = html_escaped_dup_runtime(title != NULL ? title : "");
      if (task_id > 0 && title_html != NULL && text_append_format_runtime_local(
            &html,
            &length,
            &capacity,
            "<li><form method=\"post\" action=\"/toggle\" style=\"display:inline\"><input type=\"hidden\" name=\"id\" value=\"%ld\"><button type=\"submit\">%s</button></form> <span>%s%s</span></li>",
            task_id,
            done ? "Reopen" : "Done",
            done ? "✓ " : "",
            title_html)) {
        has_items = 1;
      }
      free(title);
      free(title_html);
    }
  }
  if (!has_items) {
    free(html);
    return strdup("<li>No tasks yet.</li>");
  }
  return html;
}
 
static char *proof_home_page_params_json_dup_runtime(const char *state_path) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *state_root = proof_state_root_load_runtime(state_path, &state_doc);
  yyjson_val *items = state_root != NULL ? native_json_obj_get(state_root, "items") : NULL;
  char *task_items_html = proof_task_items_html_dup_runtime(items);
  char *last_action = state_root != NULL ? native_json_obj_get_string_dup(state_root, "last_action") : NULL;
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *page = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *result = NULL;
  if (doc == NULL || page == NULL || task_items_html == NULL || !yyjson_mut_obj_add_strcpy(doc, page, "title", "Dynamic App Template") || !yyjson_mut_obj_add_strcpy(doc, page, "intro", "Served by the Pharos native dynamic runtime contract with app-owned declarative templates.") || !yyjson_mut_obj_add_strcpy(doc, page, "last_action", last_action != NULL ? last_action : "seeded") || !yyjson_mut_obj_add_strcpy(doc, page, "task_items_html", task_items_html)) {
    yyjson_mut_doc_free(doc);
    free(task_items_html);
    free(last_action);
    native_json_doc_free(state_doc);
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, page);
  result = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
  yyjson_mut_doc_free(doc);
  free(task_items_html);
  free(last_action);
  native_json_doc_free(state_doc);
  return result;
}
 
static int write_proof_state_api_response(NativeConnection *connection, const char *state_path) {
  yyjson_doc *state_doc = NULL;
  char *body = NULL;
  int body_len = 0;
  if (connection == NULL) {
    return 500;
  }
  if (proof_state_root_load_runtime(state_path, &state_doc) == NULL || state_doc == NULL) {
    native_send_text_response(connection, 500, "Internal Server Error", "proof state unavailable\n");
    return 500;
  }
  body = yyjson_write(state_doc, YYJSON_WRITE_NOFLAG, NULL);
  native_json_doc_free(state_doc);
  if (body == NULL) {
    native_send_text_response(connection, 500, "Internal Server Error", "proof state serialize failed\n");
    return 500;
  }
  body_len = (int)strlen(body);
  native_connection_printf(
    connection,
    "HTTP/1.1 200 OK\r\n"
    "Content-Type: application/json\r\n"
    "Content-Length: %d\r\n"
    "Cache-Control: no-store\r\n"
    "Connection: close\r\n"
    "\r\n%s",
    body_len,
    body
  );
  free(body);
  return 200;
}
 
static int text_append_runtime_local(char **buffer, size_t *length, size_t *capacity, const char *text) {
  size_t text_len;
  char *grown;
  if (buffer == NULL || length == NULL || capacity == NULL || text == NULL) {
    return 0;
  }
  text_len = strlen(text);
  if (*buffer == NULL) {
    *capacity = text_len + 64;
    *buffer = (char *)malloc(*capacity);
    if (*buffer == NULL) {
      *capacity = 0;
      return 0;
    }
    (*buffer)[0] = '\0';
    *length = 0;
  }
  if (*length + text_len + 1 > *capacity) {
    *capacity = (*length + text_len + 1) * 2;
    grown = (char *)realloc(*buffer, *capacity);
    if (grown == NULL) {
      return 0;
    }
    *buffer = grown;
  }
  memcpy(*buffer + *length, text, text_len);
  *length += text_len;
  (*buffer)[*length] = '\0';
  return 1;
}
 
static int text_append_format_runtime_local(char **buffer, size_t *length, size_t *capacity, const char *format, ...) {
  va_list args;
  va_list args_copy;
  int needed;
  char *chunk;
  int ok;
  if (buffer == NULL || length == NULL || capacity == NULL || format == NULL) {
    return 0;
  }
  va_start(args, format);
  va_copy(args_copy, args);
  needed = vsnprintf(NULL, 0, format, args_copy);
  va_end(args_copy);
  if (needed < 0) {
    va_end(args);
    return 0;
  }
  chunk = (char *)malloc((size_t)needed + 1);
  if (chunk == NULL) {
    va_end(args);
    return 0;
  }
  vsnprintf(chunk, (size_t)needed + 1, format, args);
  va_end(args);
  ok = text_append_runtime_local(buffer, length, capacity, chunk);
  free(chunk);
  return ok;
}
 
static char *day_of_week_options_html_dup_runtime(const char *selected_day) {
  static const char *days[] = {"Mon", "Tue", "Wed", "Thu", "Fri", "Sat", "Sun"};
  char *html = NULL;
  size_t length = 0;
  size_t capacity = 0;
  size_t index;
  for (index = 0; index < sizeof(days) / sizeof(days[0]); index++) {
    char option[96];
    snprintf(option, sizeof(option), "<option value=\"%s\"%s>%s</option>",
      days[index],
      (selected_day != NULL && streq(selected_day, days[index])) ? " selected" : "",
      days[index]);
    if (!text_append_runtime_local(&html, &length, &capacity, option)) {
      free(html);
      return NULL;
    }
  }
  return html != NULL ? html : strdup("");
}
 
/**
 * @brief Returns the generated-admin descriptor for one declared manage surface.
 *
 * @param surface_kind Surface identifier requested by the page route.
 * @return Matching descriptor, or NULL when the surface is unsupported.
 */
static const GeneratedAdminSurfaceDescriptor *generated_admin_surface_descriptor_runtime(const char *surface_kind) {
  static const GeneratedAdminSurfaceDescriptor descriptors[] = {
    {
      "services",
      "services",
      "services",
      "Generated Service Admin",
      "Framework-owned generated admin surface for business services.",
      "Filter",
      "<option value=\"sort_order_asc\" selected>Display order</option><option value=\"name_asc\">Name</option><option value=\"duration_desc\">Longest duration</option>",
      "Records",
      "<th>Display order</th><th>Name</th><th>Cost</th><th>Duration</th>",
      "Create service",
      "Create",
      "<tr><td colspan=\"5\">No services found.</td></tr>",
      ""
    },
    {
      "availability",
      "business_availability",
      "availability",
      "Generated Availability Admin",
      "Framework-owned generated admin surface for business availability.",
      "Filter availability",
      "<option value=\"day_time_asc\" selected>Day / start time</option><option value=\"start_time_asc\">Start time</option>",
      "Availability windows",
      "<th>Day</th><th>Start</th><th>End</th>",
      "Add availability",
      "Add window",
      "<tr><td colspan=\"4\">No availability windows found.</td></tr>",
      "<label>Day<select name=\"day_of_week\" class=\"form-control\"><option value=\"\">All days</option><option value=\"Mon\">Mon</option><option value=\"Tue\">Tue</option><option value=\"Wed\">Wed</option><option value=\"Thu\">Thu</option><option value=\"Fri\">Fri</option><option value=\"Sat\">Sat</option><option value=\"Sun\">Sun</option></select></label>"
    },
    {
      "technicians",
      "technicians",
      "technicians",
      "Generated Technician Admin",
      "Framework-owned generated admin surface for business technicians.",
      "Filter technicians",
      "<option value=\"name_asc\" selected>Name</option><option value=\"email_asc\">Email</option>",
      "Technicians",
      "<th>Name</th><th>Email</th><th>Status</th>",
      "Create technician",
      "Create technician",
      "<tr><td colspan=\"4\">No technicians found.</td></tr>",
      ""
    }
  };
  size_t index;
  if (surface_kind == NULL || surface_kind[0] == '\0') {
    return NULL;
  }
  for (index = 0; index < sizeof(descriptors) / sizeof(descriptors[0]); index++) {
    if (streq(surface_kind, descriptors[index].surface_kind)) {
      return &descriptors[index];
    }
  }
  return NULL;
}
 
/**
 * @brief Appends row HTML for one generated-admin manage surface.
 *
 * @param descriptor Surface descriptor that owns the row contract.
 * @param root Loaded runtime state root.
 * @param business_id Current business identifier.
 * @param business_slug Current business slug used in edit links.
 * @param row_html Accumulated row HTML output buffer.
 * @param row_html_length Current row HTML length.
 * @param row_html_capacity Current row HTML capacity.
 * @return 1 on success, or 0 on allocation or formatting failure.
 */
static int append_generated_admin_surface_rows_runtime(
  const GeneratedAdminSurfaceDescriptor *descriptor,
  yyjson_val *root,
  long business_id,
  const char *business_slug,
  char **row_html,
  size_t *row_html_length,
  size_t *row_html_capacity
) {
  yyjson_val *rows = NULL;
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  if (descriptor == NULL || root == NULL || business_slug == NULL || row_html == NULL || row_html_length == NULL || row_html_capacity == NULL) {
    return 0;
  }
  rows = state_array_runtime_local(root, descriptor->resource_collection_name);
  if (rows != NULL && yyjson_arr_iter_init(rows, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      long row_business_id = 0;
      if (!yyjson_is_obj(row)) {
        continue;
      }
      row_business_id = native_json_obj_get_long_default(row, "business_id", 0, NULL);
      if (row_business_id != business_id) {
        continue;
      }
      if (streq(descriptor->surface_kind, "services")) {
        char *name = native_json_obj_get_string_dup(row, "name");
        char *cost = native_json_obj_get_string_dup(row, "cost");
        long resource_id = native_json_obj_get_long_default(row, "id", 0, NULL);
        long sort_order = native_json_obj_get_long_default(row, "sort_order", 0, NULL);
        long duration_minutes = native_json_obj_get_long_default(row, "duration_minutes", 0, NULL);
        if (!text_append_format_runtime_local(
              row_html,
              row_html_length,
              row_html_capacity,
              "<tr><td>%ld</td><td>%s</td><td>%s</td><td>%ld</td><td><a class=\"btn btn-secondary\" href=\"/businesses/%s/%s/%ld/edit/\">Edit</a></td></tr>",
              sort_order,
              name != NULL ? name : "",
              cost != NULL ? cost : "",
              duration_minutes,
              business_slug,
              descriptor->surface_path_segment,
              resource_id)) {
          free(name);
          free(cost);
          return 0;
        }
        free(name);
        free(cost);
      } else if (streq(descriptor->surface_kind, "availability")) {
        char *day = native_json_obj_get_string_dup(row, "day_of_week");
        char *start_time = native_json_obj_get_string_dup(row, "start_time");
        char *end_time = native_json_obj_get_string_dup(row, "end_time");
        long resource_id = native_json_obj_get_long_default(row, "id", 0, NULL);
        if (!text_append_format_runtime_local(
              row_html,
              row_html_length,
              row_html_capacity,
              "<tr><td>%s</td><td>%s</td><td>%s</td><td><a class=\"btn btn-secondary\" href=\"/businesses/%s/%s/%ld/edit/\">Edit</a></td></tr>",
              day != NULL ? day : "",
              start_time != NULL ? start_time : "",
              end_time != NULL ? end_time : "",
              business_slug,
              descriptor->surface_path_segment,
              resource_id)) {
          free(day);
          free(start_time);
          free(end_time);
          return 0;
        }
        free(day);
        free(start_time);
        free(end_time);
      } else if (streq(descriptor->surface_kind, "technicians")) {
        char *name = native_json_obj_get_string_dup(row, "name");
        char *email = native_json_obj_get_string_dup(row, "email");
        long resource_id = native_json_obj_get_long_default(row, "id", 0, NULL);
        int is_active = yyjson_get_bool(native_json_obj_get(row, "is_active"));
        if (!text_append_format_runtime_local(
              row_html,
              row_html_length,
              row_html_capacity,
              "<tr><td>%s</td><td>%s</td><td>%s</td><td><a class=\"btn btn-secondary\" href=\"/businesses/%s/%s/%ld/edit/\">Edit</a></td></tr>",
              name != NULL ? name : "",
              email != NULL ? email : "",
              is_active ? "Active" : "Inactive",
              business_slug,
              descriptor->surface_path_segment,
              resource_id)) {
          free(name);
          free(email);
          return 0;
        }
        free(name);
        free(email);
      }
    }
  }
  if (*row_html == NULL) {
    return text_append_runtime_local(row_html, row_html_length, row_html_capacity, descriptor->empty_state_row_html);
  }
  return 1;
}
 
/**
 * @brief Appends create-form field HTML for one generated-admin surface.
 *
 * @param descriptor Surface descriptor that owns the create-form contract.
 * @param form_fields_html Accumulated form field output buffer.
 * @param form_fields_length Current form field length.
 * @param form_fields_capacity Current form field capacity.
 * @param day_options_html Optional prebuilt day-of-week options for availability surfaces.
 * @return 1 on success, or 0 on allocation or formatting failure.
 */
static int append_generated_admin_surface_form_fields_runtime(
  const GeneratedAdminSurfaceDescriptor *descriptor,
  char **form_fields_html,
  size_t *form_fields_length,
  size_t *form_fields_capacity,
  const char *day_options_html
) {
  if (descriptor == NULL || form_fields_html == NULL || form_fields_length == NULL || form_fields_capacity == NULL) {
    return 0;
  }
  if (streq(descriptor->surface_kind, "services")) {
    return text_append_runtime_local(
      form_fields_html,
      form_fields_length,
      form_fields_capacity,
      "<label>Name <input type=\"text\" name=\"name\" class=\"form-control\" required></label>"
      "<label>Description <textarea name=\"description\" class=\"form-control\"></textarea></label>"
      "<label>Cost <input type=\"text\" name=\"cost\" class=\"form-control\" required></label>"
      "<label>Duration <input type=\"number\" name=\"duration_minutes\" class=\"form-control\" value=\"45\" required></label>"
      "<label>Display Order <input type=\"number\" name=\"sort_order\" class=\"form-control\" value=\"1\" required></label>"
    );
  }
  if (streq(descriptor->surface_kind, "availability")) {
    return text_append_format_runtime_local(
      form_fields_html,
      form_fields_length,
      form_fields_capacity,
      "<label>Day<select name=\"day_of_week\" class=\"form-control\">%s</select></label>"
      "<label>Start <input type=\"time\" name=\"start_time\" class=\"form-control\" value=\"09:00\"></label>"
      "<label>End <input type=\"time\" name=\"end_time\" class=\"form-control\" value=\"17:00\"></label>",
      day_options_html != NULL ? day_options_html : ""
    );
  }
  if (streq(descriptor->surface_kind, "technicians")) {
    return text_append_runtime_local(
      form_fields_html,
      form_fields_length,
      form_fields_capacity,
      "<label>Name <input type=\"text\" name=\"name\" class=\"form-control\" required></label>"
      "<label>Email <input type=\"email\" name=\"email\" class=\"form-control\" required></label>"
    );
  }
  return 0;
}
 
/**
 * @brief Duplicates the filter-control HTML for one generated-admin surface.
 *
 * @param descriptor Surface descriptor that owns the filter-control contract.
 * @return Newly allocated HTML string, or NULL on allocation failure.
 */
static char *generated_admin_surface_filter_controls_dup_runtime(
  const GeneratedAdminSurfaceDescriptor *descriptor
) {
  if (descriptor == NULL || descriptor->default_filter_controls_html == NULL) {
    return NULL;
  }
  return strdup(descriptor->default_filter_controls_html);
}
 
/**
 * @brief Writes descriptor-owned page copy into one generated-admin params document.
 *
 * @param doc Mutable document that owns the page object.
 * @param page Mutable page params object.
 * @param descriptor Surface descriptor that owns the page copy.
 * @param filter_controls_html Effective filter-control HTML for the page.
 */
static void generated_admin_surface_page_copy_runtime(
  yyjson_mut_doc *doc,
  yyjson_mut_val *page,
  const GeneratedAdminSurfaceDescriptor *descriptor,
  const char *filter_controls_html
) {
  if (doc == NULL || page == NULL || descriptor == NULL) {
    return;
  }
  yyjson_mut_obj_add_strcpy(doc, page, "surface_title", descriptor->surface_title);
  yyjson_mut_obj_add_strcpy(doc, page, "title", descriptor->surface_title);
  yyjson_mut_obj_add_strcpy(doc, page, "intro", descriptor->surface_intro);
  yyjson_mut_obj_add_strcpy(doc, page, "filter_title", descriptor->filter_title);
  yyjson_mut_obj_add_strcpy(doc, page, "sort_options_html", descriptor->sort_options_html);
  yyjson_mut_obj_add_strcpy(doc, page, "records_title", descriptor->records_title);
  yyjson_mut_obj_add_strcpy(doc, page, "header_html", descriptor->header_html);
  yyjson_mut_obj_add_strcpy(doc, page, "create_title", descriptor->create_title);
  yyjson_mut_obj_add_strcpy(doc, page, "create_button_label", descriptor->create_button_label);
  yyjson_mut_obj_add_strcpy(doc, page, "filter_controls_html", filter_controls_html != NULL ? filter_controls_html : "");
}
 
/**
 * @brief Loads slug and display-name fields for one linked resource id.
 *
 * @param root Loaded runtime state root.
 * @param resource_collection_name State collection that owns the linked resource.
 * @param resource_id Resource identifier to resolve.
 * @param display Output record that receives duplicated slug and name values.
 * @return 1 on success, or 0 when the resource cannot be resolved.
 */
static int resource_link_display_load_runtime(
  yyjson_val *root,
  const char *resource_collection_name,
  long resource_id,
  ResourceLinkDisplay *display
) {
  yyjson_val *rows = NULL;
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  if (root == NULL || resource_collection_name == NULL || resource_collection_name[0] == '\0' || resource_id <= 0 || display == NULL) {
    return 0;
  }
  memset(display, 0, sizeof(*display));
  rows = state_array_runtime_local(root, resource_collection_name);
  if (rows == NULL || !yyjson_arr_iter_init(rows, &iter)) {
    return 0;
  }
  while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
    long row_id = 0;
    if (!yyjson_is_obj(row)) {
      continue;
    }
    row_id = native_json_obj_get_long_default(row, "id", 0, NULL);
    if (row_id != resource_id) {
      continue;
    }
    display->resource_slug = native_json_obj_get_string_dup(row, "slug");
    display->resource_name = native_json_obj_get_string_dup(row, "name");
    return 1;
  }
  return 0;
}
 
/**
 * @brief Frees a linked-resource display record.
 *
 * @param display Display record to release.
 */
static void resource_link_display_free_runtime(ResourceLinkDisplay *display) {
  if (display == NULL) {
    return;
  }
  free(display->resource_slug);
  free(display->resource_name);
  display->resource_slug = NULL;
  display->resource_name = NULL;
}
 
/**
 * @brief Appends profile subscription rows for one user into an HTML list buffer.
 *
 * @param root Loaded runtime state root.
 * @param user_id Active signed-in user id.
 * @param subscriptions_block Accumulated subscription row HTML.
 * @param subscriptions_length Current subscription row length.
 * @param subscriptions_capacity Current subscription row capacity.
 * @return 1 on success, or 0 on allocation or formatting failure.
 */
static int append_profile_subscription_rows_runtime(
  yyjson_val *root,
  long user_id,
  char **subscriptions_block,
  size_t *subscriptions_length,
  size_t *subscriptions_capacity
) {
  yyjson_val *subscriptions = NULL;
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  if (root == NULL || user_id <= 0 || subscriptions_block == NULL || subscriptions_length == NULL || subscriptions_capacity == NULL) {
    return 0;
  }
  subscriptions = state_array_runtime_local(root, "subscriptions");
  if (subscriptions == NULL || !yyjson_arr_iter_init(subscriptions, &iter)) {
    return 1;
  }
  while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
    long row_user_id = 0;
    long business_id = 0;
    ResourceLinkDisplay business_display;
    if (!yyjson_is_obj(row)) {
      continue;
    }
    row_user_id = native_json_obj_get_long_default(row, "user_id", 0, NULL);
    if (row_user_id != user_id) {
      continue;
    }
    business_id = native_json_obj_get_long_default(row, "business_id", 0, NULL);
    if (!resource_link_display_load_runtime(root, "businesses", business_id, &business_display)) {
      continue;
    }
    if (!text_append_format_runtime_local(
          subscriptions_block,
          subscriptions_length,
          subscriptions_capacity,
          "<li><a href=\"/b/%s/\">%s</a> <form method=\"post\" action=\"/unsubscribe/%s/\" style=\"display:inline\"><button type=\"submit\" class=\"btn btn-danger\" style=\"padding:0.25rem 0.75rem;font-size:0.875rem\">Unsubscribe</button></form></li>",
          business_display.resource_slug != NULL ? business_display.resource_slug : "",
          business_display.resource_name != NULL ? business_display.resource_name : "",
          business_display.resource_slug != NULL ? business_display.resource_slug : "")) {
      resource_link_display_free_runtime(&business_display);
      return 0;
    }
    resource_link_display_free_runtime(&business_display);
  }
  return 1;
}
 
/**
 * @brief Builds the profile subscription block for one user.
 *
 * @param root Loaded runtime state root.
 * @param user_id Active signed-in user id.
 * @return Newly allocated HTML block, or NULL on failure.
 */
static char *profile_subscriptions_block_dup_runtime(yyjson_val *root, long user_id) {
  char *subscriptions_block = NULL;
  size_t subscriptions_length = 0;
  size_t subscriptions_capacity = 0;
  char *wrapped = NULL;
  size_t wrapped_length = 0;
  size_t wrapped_capacity = 0;
  if (!append_profile_subscription_rows_runtime(
        root,
        user_id,
        &subscriptions_block,
        &subscriptions_length,
        &subscriptions_capacity)) {
    free(subscriptions_block);
    return NULL;
  }
  if (subscriptions_block == NULL) {
    return strdup("<p class=\"muted\">You are not subscribed to any businesses yet.</p>");
  }
  if (!text_append_runtime_local(&wrapped, &wrapped_length, &wrapped_capacity, "<ul class=\"list-clean stack\">")
      || !text_append_runtime_local(&wrapped, &wrapped_length, &wrapped_capacity, subscriptions_block)
      || !text_append_runtime_local(&wrapped, &wrapped_length, &wrapped_capacity, "</ul>")) {
    free(wrapped);
    free(subscriptions_block);
    return NULL;
  }
  free(subscriptions_block);
  return wrapped;
}
 
static char *generated_admin_manage_page_params_json_dup_runtime(const char *state_path, const char *business_slug, const char *surface_kind, const char *error_text) {
  const GeneratedAdminSurfaceDescriptor *descriptor = NULL;
  yyjson_doc *state_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *business = NULL;
  yyjson_mut_doc *doc = NULL;
  yyjson_mut_val *page = NULL;
  char *error_html = NULL;
  char *row_html = NULL;
  char *form_fields_html = NULL;
  char *filter_controls_html = NULL;
  char *day_options_html = NULL;
  size_t row_html_length = 0;
  size_t row_html_capacity = 0;
  size_t form_fields_length = 0;
  size_t form_fields_capacity = 0;
  long business_id = 0;
  char *result = NULL;
  if (state_path == NULL || business_slug == NULL || surface_kind == NULL) {
    return NULL;
  }
  descriptor = generated_admin_surface_descriptor_runtime(surface_kind);
  if (descriptor == NULL) {
    return NULL;
  }
  state_doc = native_json_doc_load_file(state_path);
  root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
  if (business == NULL) {
    native_json_doc_free(state_doc);
    return NULL;
  }
  business_id = native_json_obj_get_long_default(business, "id", 0, NULL);
  error_html = error_alert_html_dup_runtime(error_text != NULL ? error_text : "");
  doc = yyjson_mut_doc_new(NULL);
  page = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  if (doc == NULL || page == NULL || error_html == NULL) {
    free(error_html);
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(doc);
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, page);
  if (streq(descriptor->surface_kind, "availability")) {
    day_options_html = day_of_week_options_html_dup_runtime("Mon");
    if (day_options_html == NULL) {
      goto generated_admin_manage_cleanup;
    }
  }
  if (!append_generated_admin_surface_rows_runtime(
        descriptor,
        root,
        business_id,
        business_slug,
        &row_html,
        &row_html_length,
        &row_html_capacity)) {
    goto generated_admin_manage_cleanup;
  }
  if (!append_generated_admin_surface_form_fields_runtime(
        descriptor,
        &form_fields_html,
        &form_fields_length,
        &form_fields_capacity,
        day_options_html)) {
    goto generated_admin_manage_cleanup;
  }
  filter_controls_html = generated_admin_surface_filter_controls_dup_runtime(descriptor);
  if (descriptor->default_filter_controls_html != NULL && filter_controls_html == NULL) {
    goto generated_admin_manage_cleanup;
  }
  generated_admin_surface_page_copy_runtime(doc, page, descriptor, filter_controls_html);
 
  {
    char manage_path[256];
    char create_path[256];
    char back_path[256];
    snprintf(back_path, sizeof(back_path), "/businesses/%s/", business_slug);
    snprintf(manage_path, sizeof(manage_path), "/businesses/%s/%s/", business_slug, descriptor->surface_path_segment);
    snprintf(create_path, sizeof(create_path), "/businesses/%s/%s/new/", business_slug, descriptor->surface_path_segment);
    yyjson_mut_obj_add_strcpy(doc, page, "back_path", back_path);
    yyjson_mut_obj_add_strcpy(doc, page, "manage_path", manage_path);
    yyjson_mut_obj_add_strcpy(doc, page, "create_path", create_path);
  }
  yyjson_mut_obj_add_strcpy(doc, page, "error_html", error_html);
  yyjson_mut_obj_add_strcpy(doc, page, "form_fields_html", form_fields_html != NULL ? form_fields_html : "");
  yyjson_mut_obj_add_strcpy(doc, page, "row_html", row_html != NULL ? row_html : "");
  yyjson_mut_obj_add_strcpy(doc, page, "current_page_size", "25");
  yyjson_mut_obj_add_strcpy(doc, page, "pagination_summary", "Page 1 of 1 · local state");
  result = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
 
generated_admin_manage_cleanup:
  free(error_html);
  free(row_html);
  free(form_fields_html);
  free(filter_controls_html);
  free(day_options_html);
  native_json_doc_free(state_doc);
  yyjson_mut_doc_free(doc);
  return result;
}
 
/**
 * @brief Builds profile-page template params directly from runtime state.
 *
 * This local builder keeps the profile page on the native dynamic render path
 * without depending on the older shared profile params helper.
 *
 * @param state_path Runtime state JSON path.
 * @param user_id Active signed-in user id.
 * @param payment_preference_options_html Pre-rendered select option HTML.
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
static char *profile_page_params_json_dup_runtime_local(const char *state_path, long user_id, const char *payment_preference_options_html) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *user = NULL;
  char *subscriptions_block = NULL;
  char *full_name = NULL;
  char *email = NULL;
  char *phone_number = NULL;
  char *address = NULL;
  yyjson_mut_doc *doc = NULL;
  yyjson_mut_val *page = NULL;
  char *result = NULL;
 
  if (state_path == NULL || user_id <= 0) {
    return NULL;
  }
  state_doc = native_json_doc_load_file(state_path);
  root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  user = root != NULL ? find_user_by_id_runtime_local(root, user_id) : NULL;
  if (root == NULL || user == NULL) {
    native_json_doc_free(state_doc);
    return NULL;
  }
 
  subscriptions_block = profile_subscriptions_block_dup_runtime(root, user_id);
  if (subscriptions_block == NULL) {
    free(full_name);
    free(email);
    free(phone_number);
    free(address);
    native_json_doc_free(state_doc);
    return NULL;
  }
 
  full_name = native_json_obj_get_string_dup(user, "full_name");
  email = native_json_obj_get_string_dup(user, "email");
  phone_number = native_json_obj_get_string_dup(user, "phone_number");
  address = native_json_obj_get_string_dup(user, "address");
  doc = yyjson_mut_doc_new(NULL);
  page = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  if (doc == NULL || page == NULL
      || !yyjson_mut_obj_add_strcpy(doc, page, "full_name", full_name != NULL ? full_name : "")
      || !yyjson_mut_obj_add_strcpy(doc, page, "email", email != NULL ? email : "")
      || !yyjson_mut_obj_add_strcpy(doc, page, "phone_number", phone_number != NULL ? phone_number : "")
      || !yyjson_mut_obj_add_strcpy(doc, page, "address", address != NULL ? address : "")
      || !yyjson_mut_obj_add_strcpy(doc, page, "payment_preference_options_html", payment_preference_options_html != NULL ? payment_preference_options_html : "")
      || !yyjson_mut_obj_add_strcpy(doc, page, "google_status", "Disconnected")
      || !yyjson_mut_obj_add_strcpy(doc, page, "subscriptions_block", subscriptions_block != NULL ? subscriptions_block : "")) {
    free(full_name);
    free(email);
    free(phone_number);
    free(address);
    free(subscriptions_block);
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(doc);
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, page);
  result = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
  free(full_name);
  free(email);
  free(phone_number);
  free(address);
  free(subscriptions_block);
  native_json_doc_free(state_doc);
  yyjson_mut_doc_free(doc);
  return result;
}
 
static char *business_availability_edit_page_params_json_dup_runtime(const char *state_path, const char *business_slug, long availability_id, const char *error_text) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *business = NULL;
  yyjson_val *rows = NULL;
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  yyjson_mut_doc *doc = NULL;
  yyjson_mut_val *page = NULL;
  char *day = NULL;
  char *start = NULL;
  char *end = NULL;
  char *day_options_html = NULL;
  char *error_html = NULL;
  long business_id = 0;
  char *result = NULL;
  if (state_path == NULL || business_slug == NULL || availability_id <= 0) {
    return NULL;
  }
  state_doc = native_json_doc_load_file(state_path);
  root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
  if (business == NULL) {
    native_json_doc_free(state_doc);
    return NULL;
  }
  business_id = native_json_obj_get_long_default(business, "id", 0, NULL);
  rows = state_array_runtime_local(root, "business_availability");
  if (rows != NULL && yyjson_arr_iter_init(rows, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      if (!yyjson_is_obj(row)) continue;
      if (native_json_obj_get_long_default(row, "id", 0, NULL) == availability_id
          && native_json_obj_get_long_default(row, "business_id", 0, NULL) == business_id) {
        day = native_json_obj_get_string_dup(row, "day_of_week");
        start = native_json_obj_get_string_dup(row, "start_time");
        end = native_json_obj_get_string_dup(row, "end_time");
        break;
      }
    }
  }
  if (day == NULL && start == NULL && end == NULL) {
    native_json_doc_free(state_doc);
    return NULL;
  }
  day_options_html = day_of_week_options_html_dup_runtime(day != NULL ? day : "");
  error_html = error_alert_html_dup_runtime(error_text != NULL ? error_text : "");
  doc = yyjson_mut_doc_new(NULL);
  page = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  if (doc == NULL || page == NULL || day_options_html == NULL || error_html == NULL) {
    free(day); free(start); free(end); free(day_options_html); free(error_html);
    native_json_doc_free(state_doc); yyjson_mut_doc_free(doc);
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, page);
  {
    char save_path[256];
    char business_path[256];
    snprintf(save_path, sizeof(save_path), "/businesses/%s/availability/%ld/edit/", business_slug, availability_id);
    snprintf(business_path, sizeof(business_path), "/businesses/%s/", business_slug);
    yyjson_mut_obj_add_strcpy(doc, page, "save_path", save_path);
    yyjson_mut_obj_add_strcpy(doc, page, "business_path", business_path);
  }
  yyjson_mut_obj_add_strcpy(doc, page, "error_html", error_html);
  yyjson_mut_obj_add_strcpy(doc, page, "day_options_html", day_options_html);
  yyjson_mut_obj_add_strcpy(doc, page, "start_time", start != NULL ? start : "");
  yyjson_mut_obj_add_strcpy(doc, page, "end_time", end != NULL ? end : "");
  result = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
  free(day); free(start); free(end); free(day_options_html); free(error_html);
  native_json_doc_free(state_doc); yyjson_mut_doc_free(doc);
  return result;
}
 
/**
 * @brief Tests whether a request path is the exact business services list API path.
 *
 * Matches only @c /api/businesses/{business_slug}/services/ and avoids
 * hijacking other four-segment paths that happen to contain a slug-like
 * segment in the same position.
 *
 * @param request_path Normalized request path without query string.
 * @return 1 when the path is the exact services list API path, else 0.
 */
static int is_business_services_api_list_path_runtime(const char *request_path) {
  static const char *prefix = "/api/businesses/";
  static const char *suffix = "/services/";
  const char *slug_start;
  const char *suffix_start;
  size_t prefix_len;
  size_t suffix_len;
  size_t slug_len;
  size_t path_len;
 
  if (request_path == NULL) {
    return 0;
  }
  prefix_len = strlen(prefix);
  suffix_len = strlen(suffix);
  path_len = strlen(request_path);
  if (path_len <= prefix_len + suffix_len) {
    return 0;
  }
  if (strncmp(request_path, prefix, prefix_len) != 0) {
    return 0;
  }
  suffix_start = request_path + (path_len - suffix_len);
  if (strcmp(suffix_start, suffix) != 0) {
    return 0;
  }
  slug_start = request_path + prefix_len;
  slug_len = (size_t)(suffix_start - slug_start);
  if (slug_len == 0) {
    return 0;
  }
  return memchr(slug_start, '/', slug_len) == NULL ? 1 : 0;
}
 
/**
 * @brief Tests whether a request path is the exact business availability list API path.
 *
 * Matches only @c /api/businesses/{business_slug}/availability/.
 *
 * @param request_path Normalized request path without query string.
 * @return 1 when the path is the exact availability list API path, else 0.
 */
static int is_business_availability_api_list_path_runtime(const char *request_path) {
  static const char *prefix = "/api/businesses/";
  static const char *suffix = "/availability/";
  const char *slug_start;
  const char *suffix_start;
  size_t prefix_len;
  size_t suffix_len;
  size_t slug_len;
  size_t path_len;
 
  if (request_path == NULL) {
    return 0;
  }
  prefix_len = strlen(prefix);
  suffix_len = strlen(suffix);
  path_len = strlen(request_path);
  if (path_len <= prefix_len + suffix_len) {
    return 0;
  }
  if (strncmp(request_path, prefix, prefix_len) != 0) {
    return 0;
  }
  suffix_start = request_path + (path_len - suffix_len);
  if (strcmp(suffix_start, suffix) != 0) {
    return 0;
  }
  slug_start = request_path + prefix_len;
  slug_len = (size_t)(suffix_start - slug_start);
  if (slug_len == 0) {
    return 0;
  }
  return memchr(slug_start, '/', slug_len) == NULL ? 1 : 0;
}
 
/**
 * @brief Tests whether a request path is the exact business services schema API path.
 * @param request_path Normalized request path without query string.
 * @return 1 when the path is the exact services schema API path, else 0.
 */
static int is_business_services_api_schema_path_runtime(const char *request_path) {
  static const char *prefix = "/api/businesses/";
  static const char *suffix = "/services/schema/";
  const char *slug_start;
  const char *suffix_start;
  size_t prefix_len;
  size_t suffix_len;
  size_t slug_len;
  size_t path_len;
 
  if (request_path == NULL) {
    return 0;
  }
  prefix_len = strlen(prefix);
  suffix_len = strlen(suffix);
  path_len = strlen(request_path);
  if (path_len <= prefix_len + suffix_len) {
    return 0;
  }
  if (strncmp(request_path, prefix, prefix_len) != 0) {
    return 0;
  }
  suffix_start = request_path + (path_len - suffix_len);
  if (strcmp(suffix_start, suffix) != 0) {
    return 0;
  }
  slug_start = request_path + prefix_len;
  slug_len = (size_t)(suffix_start - slug_start);
  if (slug_len == 0) {
    return 0;
  }
  return memchr(slug_start, '/', slug_len) == NULL ? 1 : 0;
}
 
/**
 * @brief Tests whether a request path is the exact business availability schema API path.
 * @param request_path Normalized request path without query string.
 * @return 1 when the path is the exact availability schema API path, else 0.
 */
static int is_business_availability_api_schema_path_runtime(const char *request_path) {
  static const char *prefix = "/api/businesses/";
  static const char *suffix = "/availability/schema/";
  const char *slug_start;
  const char *suffix_start;
  size_t prefix_len;
  size_t suffix_len;
  size_t slug_len;
  size_t path_len;
 
  if (request_path == NULL) {
    return 0;
  }
  prefix_len = strlen(prefix);
  suffix_len = strlen(suffix);
  path_len = strlen(request_path);
  if (path_len <= prefix_len + suffix_len) {
    return 0;
  }
  if (strncmp(request_path, prefix, prefix_len) != 0) {
    return 0;
  }
  suffix_start = request_path + (path_len - suffix_len);
  if (strcmp(suffix_start, suffix) != 0) {
    return 0;
  }
  slug_start = request_path + prefix_len;
  slug_len = (size_t)(suffix_start - slug_start);
  if (slug_len == 0) {
    return 0;
  }
  return memchr(slug_start, '/', slug_len) == NULL ? 1 : 0;
}
 
/**
 * @brief Resolves the final page title from a declarative page spec and params.
 *
 * Prefers an explicit @c title value from the page spec. When the spec uses
 * @c title_mode instead, this treats the title-mode value as the params field
 * name whose string value should supply the page title.
 *
 * @param page_spec_root Loaded page-spec JSON root.
 * @param body_params_root Loaded page-params JSON root.
 * @return Newly allocated page title string, or an empty string on fallback.
 *         Caller must free.
 */
static int valid_day_of_week_runtime(const char *day_text) {
  return day_text != NULL && (
    streq(day_text, "Mon") || streq(day_text, "Tue") || streq(day_text, "Wed") ||
    streq(day_text, "Thu") || streq(day_text, "Fri") || streq(day_text, "Sat") || streq(day_text, "Sun")
  );
}
 
static int time_text_to_minutes_runtime(const char *time_text, int *minutes_out) {
  int hour = 0;
  int minute = 0;
  if (minutes_out != NULL) {
    *minutes_out = 0;
  }
  if (time_text == NULL || strlen(time_text) != 5 || time_text[2] != ':') {
    return 0;
  }
  if (time_text[0] < '0' || time_text[0] > '9' || time_text[1] < '0' || time_text[1] > '9'
      || time_text[3] < '0' || time_text[3] > '9' || time_text[4] < '0' || time_text[4] > '9') {
    return 0;
  }
  hour = (time_text[0] - '0') * 10 + (time_text[1] - '0');
  minute = (time_text[3] - '0') * 10 + (time_text[4] - '0');
  if (hour < 0 || hour > 23 || minute < 0 || minute > 59) {
    return 0;
  }
  if (minutes_out != NULL) {
    *minutes_out = hour * 60 + minute;
  }
  return 1;
}
 
static char *page_title_dup_runtime(yyjson_val *page_spec_root, yyjson_val *body_params_root) {
  char *title = NULL;
  char *title_mode = NULL;
  if (page_spec_root != NULL) {
    title = native_json_obj_get_string_dup(page_spec_root, "title");
    title_mode = native_json_obj_get_string_dup(page_spec_root, "title_mode");
  }
  if ((title == NULL || title[0] == '\0') && title_mode != NULL && title_mode[0] != '\0' && body_params_root != NULL) {
    free(title);
    title = native_json_obj_get_string_dup(body_params_root, title_mode);
  }
  free(title_mode);
  if (title == NULL) {
    title = strdup("");
  }
  return title;
}
 
static int write_business_services_api_response(
  NativeConnection *connection,
  const char *state_path,
  const char *business_slug
) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *business = NULL;
  yyjson_val *services = NULL;
  yyjson_arr_iter iter;
  yyjson_val *service = NULL;
  yyjson_mut_doc *out_doc = NULL;
  yyjson_mut_val *out_root = NULL;
  yyjson_mut_val *items = NULL;
  char *body = NULL;
  long business_id = 0;
  int status = 500;
 
  if (connection == NULL || state_path == NULL || business_slug == NULL) {
    return 500;
  }
  state_doc = native_json_doc_load_file(state_path);
  root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
  if (business == NULL) {
    write_json_error(connection, 404, "Not Found", "not_found", "Business not found.");
    native_json_doc_free(state_doc);
    return 404;
  }
  business_id = native_json_obj_get_long_default(business, "id", 0, NULL);
  services = root != NULL ? state_array_runtime_local(root, "services") : NULL;
  out_doc = yyjson_mut_doc_new(NULL);
  out_root = out_doc != NULL ? yyjson_mut_obj(out_doc) : NULL;
  items = out_doc != NULL ? yyjson_mut_arr(out_doc) : NULL;
  if (out_doc == NULL || out_root == NULL || items == NULL) {
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(out_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "service api render failed\n");
    return 500;
  }
  yyjson_mut_doc_set_root(out_doc, out_root);
  if (services != NULL && yyjson_arr_iter_init(services, &iter)) {
    while ((service = yyjson_arr_iter_next(&iter)) != NULL) {
      yyjson_mut_val *entry = NULL;
      if (!yyjson_is_obj(service) || native_json_obj_get_long_default(service, "business_id", 0, NULL) != business_id) {
        continue;
      }
      entry = yyjson_val_mut_copy(out_doc, service);
      if (entry != NULL) {
        yyjson_mut_arr_append(items, entry);
      }
    }
  }
  yyjson_mut_obj_put(out_root, yyjson_mut_strcpy(out_doc, "items"), items);
  body = yyjson_mut_write(out_doc, YYJSON_WRITE_NOFLAG, NULL);
  if (body == NULL) {
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(out_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "service api serialize failed\n");
    return 500;
  }
  native_connection_printf(
    connection,
    "HTTP/1.1 200 OK\r\n"
    "Content-Type: application/json\r\n"
    "Content-Length: %d\r\n"
    "Cache-Control: no-store\r\n"
    "Connection: close\r\n"
    "\r\n%s",
    (int)strlen(body),
    body
  );
  status = 200;
  free(body);
  native_json_doc_free(state_doc);
  yyjson_mut_doc_free(out_doc);
  return status;
}
 
static int write_business_availability_api_response(
  NativeConnection *connection,
  const char *state_path,
  const char *business_slug
) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *business = NULL;
  yyjson_val *availability_rows = NULL;
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  yyjson_mut_doc *out_doc = NULL;
  yyjson_mut_val *out_root = NULL;
  yyjson_mut_val *items = NULL;
  char *body = NULL;
  long business_id = 0;
  int status = 500;
 
  if (connection == NULL || state_path == NULL || business_slug == NULL) {
    return 500;
  }
  state_doc = native_json_doc_load_file(state_path);
  root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
  if (business == NULL) {
    write_json_error(connection, 404, "Not Found", "not_found", "Business not found.");
    native_json_doc_free(state_doc);
    return 404;
  }
  business_id = native_json_obj_get_long_default(business, "id", 0, NULL);
  availability_rows = root != NULL ? state_array_runtime_local(root, "business_availability") : NULL;
  out_doc = yyjson_mut_doc_new(NULL);
  out_root = out_doc != NULL ? yyjson_mut_obj(out_doc) : NULL;
  items = out_doc != NULL ? yyjson_mut_arr(out_doc) : NULL;
  if (out_doc == NULL || out_root == NULL || items == NULL) {
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(out_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "availability api render failed\n");
    return 500;
  }
  yyjson_mut_doc_set_root(out_doc, out_root);
  if (availability_rows != NULL && yyjson_arr_iter_init(availability_rows, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      yyjson_mut_val *entry = NULL;
      if (!yyjson_is_obj(row) || native_json_obj_get_long_default(row, "business_id", 0, NULL) != business_id) {
        continue;
      }
      entry = yyjson_val_mut_copy(out_doc, row);
      if (entry != NULL) {
        yyjson_mut_arr_append(items, entry);
      }
    }
  }
  yyjson_mut_obj_put(out_root, yyjson_mut_strcpy(out_doc, "items"), items);
  body = yyjson_mut_write(out_doc, YYJSON_WRITE_NOFLAG, NULL);
  if (body == NULL) {
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(out_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "availability api serialize failed\n");
    return 500;
  }
  native_connection_printf(
    connection,
    "HTTP/1.1 200 OK\r\n"
    "Content-Type: application/json\r\n"
    "Content-Length: %d\r\n"
    "Cache-Control: no-store\r\n"
    "Connection: close\r\n"
    "\r\n%s",
    (int)strlen(body),
    body
  );
  status = 200;
  free(body);
  native_json_doc_free(state_doc);
  yyjson_mut_doc_free(out_doc);
  return status;
}
 
/**
 * @brief Resolves the generated-surface fixture path for the active app.
 *
 * Prefers the built-artifact copy and falls back to the app-root copy.
 *
 * @param app Active app runtime.
 * @return Newly allocated path string, or NULL when unavailable.
 *         Caller must free.
 */
static char *generated_surface_fixture_path_dup_runtime(const AppRuntime *app) {
  char *path = NULL;
  if (app == NULL) {
    return NULL;
  }
  if (app->artifact_dir != NULL) {
    path = join_base_relative_path_dup_runtime(app->artifact_dir, "data/framework/generated-surface-fixture-v1.json");
    if (path != NULL && path_exists(path)) {
      return path;
    }
    free(path);
  }
  if (app->app_root != NULL) {
    path = join_base_relative_path_dup_runtime(app->app_root, "data/framework/generated-surface-fixture-v1.json");
    if (path != NULL && path_exists(path)) {
      return path;
    }
    free(path);
  }
  return NULL;
}
 
/**
 * @brief Writes one generated-surface schema object from the declarative fixture.
 *
 * @param connection Connection to write to.
 * @param app Active app runtime for fixture resolution.
 * @param state_path Runtime state path used to validate the business slug.
 * @param business_slug Business slug from the request path.
 * @param surface_id Schema surface id to emit.
 * @return HTTP status code written to the client.
 */
static int write_generated_surface_schema_response(
  NativeConnection *connection,
  const AppRuntime *app,
  const char *state_path,
  const char *business_slug,
  const char *surface_id
) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *state_root = NULL;
  yyjson_val *business = NULL;
  char *fixture_path = NULL;
  yyjson_doc *fixture_doc = NULL;
  yyjson_val *fixture_root = NULL;
  yyjson_val *surfaces = NULL;
  yyjson_arr_iter iter;
  yyjson_val *surface = NULL;
  yyjson_mut_doc *out_doc = NULL;
  yyjson_mut_val *out_surface = NULL;
  char *body = NULL;
 
  if (connection == NULL || app == NULL || state_path == NULL || business_slug == NULL || surface_id == NULL) {
    return 500;
  }
  state_doc = native_json_doc_load_file(state_path);
  state_root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  business = state_root != NULL ? find_business_by_slug_runtime_local(state_root, business_slug) : NULL;
  if (business == NULL) {
    write_json_error(connection, 404, "Not Found", "not_found", "Business not found.");
    native_json_doc_free(state_doc);
    return 404;
  }
  fixture_path = generated_surface_fixture_path_dup_runtime(app);
  fixture_doc = fixture_path != NULL ? native_json_doc_load_file(fixture_path) : NULL;
  fixture_root = fixture_doc != NULL ? yyjson_doc_get_root(fixture_doc) : NULL;
  surfaces = fixture_root != NULL ? native_json_obj_get(fixture_root, "surfaces") : NULL;
  if (surfaces != NULL && yyjson_is_arr(surfaces) && yyjson_arr_iter_init(surfaces, &iter)) {
    while ((surface = yyjson_arr_iter_next(&iter)) != NULL) {
      yyjson_val *surface_id_value = native_json_obj_get(surface, "surface_id");
      if (yyjson_is_str(surface_id_value) && yyjson_equals_str(surface_id_value, surface_id)) {
        break;
      }
      surface = NULL;
    }
  }
  if (surface == NULL) {
    free(fixture_path);
    native_json_doc_free(state_doc);
    native_json_doc_free(fixture_doc);
    write_json_error(connection, 404, "Not Found", "not_found", "Generated surface schema not found.");
    return 404;
  }
  out_doc = yyjson_mut_doc_new(NULL);
  out_surface = out_doc != NULL ? yyjson_val_mut_copy(out_doc, surface) : NULL;
  if (out_doc == NULL || out_surface == NULL) {
    free(fixture_path);
    native_json_doc_free(state_doc);
    native_json_doc_free(fixture_doc);
    yyjson_mut_doc_free(out_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "schema render failed\n");
    return 500;
  }
  yyjson_mut_doc_set_root(out_doc, out_surface);
  body = yyjson_mut_write(out_doc, YYJSON_WRITE_NOFLAG, NULL);
  if (body == NULL) {
    free(fixture_path);
    native_json_doc_free(state_doc);
    native_json_doc_free(fixture_doc);
    yyjson_mut_doc_free(out_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "schema serialize failed\n");
    return 500;
  }
  native_connection_printf(
    connection,
    "HTTP/1.1 200 OK\r\n"
    "Content-Type: application/json\r\n"
    "Content-Length: %d\r\n"
    "Cache-Control: no-store\r\n"
    "Connection: close\r\n"
    "\r\n%s",
    (int)strlen(body),
    body
  );
  free(body);
  free(fixture_path);
  native_json_doc_free(state_doc);
  native_json_doc_free(fixture_doc);
  yyjson_mut_doc_free(out_doc);
  return 200;
}
 
static char *login_page_params_json_dup_runtime(const char *query_string, const char *error_message) {
  yyjson_mut_doc *doc = NULL;
  yyjson_mut_val *root = NULL;
  char *params_json = NULL;
  char *next_path = native_dynamic_query_value(query_string, "next");
  char *error_html = error_alert_html_dup_runtime(error_message != NULL ? error_message : "");
  char *next_input = hidden_next_input_html_dup_runtime(next_path != NULL ? next_path : "");
 
  doc = yyjson_mut_doc_new(NULL);
  root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  if (doc == NULL || root == NULL
      || error_html == NULL || next_input == NULL
      || !yyjson_mut_obj_add_strcpy(doc, root, "error_html", error_html)
      || !yyjson_mut_obj_add_strcpy(doc, root, "next_input", next_input)) {
    yyjson_mut_doc_free(doc);
    free(next_path);
    free(error_html);
    free(next_input);
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, root);
  params_json = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
  yyjson_mut_doc_free(doc);
  free(next_path);
  free(error_html);
  free(next_input);
  return params_json;
}
 
static char *register_page_params_json_dup_runtime(const char *query_string) {
  yyjson_mut_doc *doc = NULL;
  yyjson_mut_val *root = NULL;
  char *params_json = NULL;
  char *next_path = native_dynamic_query_value(query_string, "next");
  char *error_html = error_alert_html_dup_runtime("");
  char *next_input = hidden_next_input_html_dup_runtime(next_path != NULL ? next_path : "");
  const char *account_type_options_html =
    "<option value=\"business_customer\" selected>Customer</option>"
    "<option value=\"business_owner\">Business owner</option>";
 
  doc = yyjson_mut_doc_new(NULL);
  root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  if (doc == NULL || root == NULL
      || error_html == NULL || next_input == NULL
      || !yyjson_mut_obj_add_strcpy(doc, root, "error_html", error_html)
      || !yyjson_mut_obj_add_strcpy(doc, root, "next_input", next_input)
      || !yyjson_mut_obj_add_strcpy(doc, root, "account_type_options_html", account_type_options_html)) {
    yyjson_mut_doc_free(doc);
    free(next_path);
    free(error_html);
    free(next_input);
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, root);
  params_json = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
  yyjson_mut_doc_free(doc);
  free(next_path);
  free(error_html);
  free(next_input);
  return params_json;
}
 
/**
 * @brief Builds native template params for the password-reset request page.
 *
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
/**
 * @brief Adds one literal string field to a page-params JSON object.
 *
 * @param doc Mutable params document.
 * @param root Mutable params object.
 * @param key Field name to populate.
 * @param value Raw string value to store.
 * @return 1 on success, or 0 on allocation failure.
 */
static int runtime_page_params_add_string_runtime(
  yyjson_mut_doc *doc,
  yyjson_mut_val *root,
  const char *key,
  const char *value
) {
  if (doc == NULL || root == NULL || key == NULL || key[0] == '\0') {
    return 0;
  }
  return yyjson_mut_obj_add_strcpy(doc, root, key, value != NULL ? value : "") ? 1 : 0;
}
 
/**
 * @brief Adds one HTML-escaped string field to a page-params JSON object.
 *
 * @param doc Mutable params document.
 * @param root Mutable params object.
 * @param key Field name to populate.
 * @param value Raw string value to escape before storing.
 * @return 1 on success, or 0 on allocation or escaping failure.
 */
static int runtime_page_params_add_escaped_string_runtime(
  yyjson_mut_doc *doc,
  yyjson_mut_val *root,
  const char *key,
  const char *value
) {
  char *escaped_value = NULL;
  int added = 0;
  if (doc == NULL || root == NULL || key == NULL || key[0] == '\0') {
    return 0;
  }
  escaped_value = html_escaped_dup_runtime(value != NULL ? value : "");
  if (escaped_value == NULL) {
    return 0;
  }
  added = yyjson_mut_obj_add_strcpy(doc, root, key, escaped_value) ? 1 : 0;
  free(escaped_value);
  return added;
}
 
/**
 * @brief Finalizes and writes one page-params document as compact JSON.
 *
 * @param doc Mutable params document.
 * @param root Mutable params object.
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
static char *runtime_page_params_write_runtime(yyjson_mut_doc *doc, yyjson_mut_val *root) {
  if (doc == NULL || root == NULL) {
    return NULL;
  }
  yyjson_mut_doc_set_root(doc, root);
  return yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
}
 
/**
 * @brief Builds the optional password-reset preview HTML block.
 *
 * @param preview_path Local preview path to expose.
 * @return Newly allocated HTML fragment, or an empty string when no preview path exists.
 */
static char *password_reset_preview_html_dup_runtime(const char *preview_path) {
  size_t needed = 0;
  char *preview_html = NULL;
  if (preview_path == NULL || preview_path[0] == '\0') {
    return strdup("");
  }
  needed = strlen(preview_path) * 2 + 128;
  preview_html = (char *)malloc(needed);
  if (preview_html == NULL) {
    return NULL;
  }
  snprintf(
    preview_html,
    needed,
    "<p>Local runtime preview link:</p><p><a href=\"%s\"><code>%s</code></a></p>",
    preview_path,
    preview_path
  );
  return preview_html;
}
 
/**
 * @brief Builds the optional invite target HTML fragment.
 *
 * @param target_business_name Optional invite-associated business display name.
 * @return Newly allocated HTML fragment, or an empty string when no target exists.
 */
static char *invite_accept_target_html_dup_runtime(const char *target_business_name) {
  char *escaped_target_business_name = NULL;
  char *target_html = NULL;
  size_t target_length = 0;
  size_t target_capacity = 0;
  if (target_business_name == NULL || target_business_name[0] == '\0') {
    return strdup("");
  }
  escaped_target_business_name = html_escaped_dup_runtime(target_business_name);
  if (escaped_target_business_name == NULL
      || !text_append_runtime_local(&target_html, &target_length, &target_capacity, "<p>This invite is associated with <strong>")
      || !text_append_runtime_local(&target_html, &target_length, &target_capacity, escaped_target_business_name)
      || !text_append_runtime_local(&target_html, &target_length, &target_capacity, "</strong>.</p>")) {
    free(escaped_target_business_name);
    free(target_html);
    return NULL;
  }
  free(escaped_target_business_name);
  return target_html;
}
 
static char *password_reset_request_page_params_json_dup_runtime(void) {
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *error_html = error_alert_html_dup_runtime("");
  char *params_json = NULL;
  if (doc == NULL || root == NULL || error_html == NULL
      || !runtime_page_params_add_string_runtime(doc, root, "error_html", error_html)) {
    yyjson_mut_doc_free(doc);
    free(error_html);
    return NULL;
  }
  params_json = runtime_page_params_write_runtime(doc, root);
  yyjson_mut_doc_free(doc);
  free(error_html);
  return params_json;
}
 
static char *password_reset_sent_page_params_json_dup_runtime(const char *preview_path) {
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *params_json = NULL;
  char *preview_html = password_reset_preview_html_dup_runtime(preview_path);
  if (doc == NULL || root == NULL || preview_html == NULL
      || !runtime_page_params_add_string_runtime(doc, root, "preview_html", preview_html)) {
    yyjson_mut_doc_free(doc);
    free(preview_html);
    return NULL;
  }
  params_json = runtime_page_params_write_runtime(doc, root);
  yyjson_mut_doc_free(doc);
  free(preview_html);
  return params_json;
}
 
/**
 * @brief Builds native template params for the password-reset completion page.
 *
 * @param request_path Matched request path that contains the reset token.
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
static char *password_reset_complete_page_params_json_dup_runtime(const char *request_path) {
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *error_html = error_alert_html_dup_runtime("");
  char *params_json = NULL;
  if (doc == NULL || root == NULL || error_html == NULL
      || !runtime_page_params_add_string_runtime(doc, root, "error_html", error_html)
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "reset_post_path", request_path != NULL ? request_path : "")) {
    yyjson_mut_doc_free(doc);
    free(error_html);
    return NULL;
  }
  params_json = runtime_page_params_write_runtime(doc, root);
  yyjson_mut_doc_free(doc);
  free(error_html);
  return params_json;
}
 
/**
 * @brief Builds template params for the invite-created confirmation page.
 *
 * @param invite_email Invite target email.
 * @param invite_path Native preview path for the invite token.
 * @param return_path Business return path.
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
static char *invite_created_page_params_json_dup_runtime(const char *invite_email, const char *invite_path, const char *return_path) {
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *params_json = NULL;
  if (doc == NULL || root == NULL
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "invite_email", invite_email != NULL ? invite_email : "")
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "invite_path", invite_path != NULL ? invite_path : "")
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "return_path", return_path != NULL ? return_path : "")) {
    yyjson_mut_doc_free(doc);
    return NULL;
  }
  params_json = runtime_page_params_write_runtime(doc, root);
  yyjson_mut_doc_free(doc);
  return params_json;
}
 
/**
 * @brief Builds template params for the invite-accept page.
 *
 * @param invite_kind Invite kind label.
 * @param target_business_name Optional business name attached to the invite.
 * @param error_message Optional error text.
 * @param invite_email Invite email.
 * @param form_action Form POST target.
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
static char *invite_accept_page_params_json_dup_runtime(const char *invite_kind, const char *target_business_name, const char *error_message, const char *invite_email, const char *form_action) {
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *error_html = error_alert_html_dup_runtime(error_message != NULL ? error_message : "");
  char *target_html = invite_accept_target_html_dup_runtime(target_business_name);
  char *params_json = NULL;
  if (doc == NULL || root == NULL || error_html == NULL || target_html == NULL
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "invite_kind", invite_kind != NULL ? invite_kind : "business_invite")
      || !runtime_page_params_add_string_runtime(doc, root, "target_html", target_html)
      || !runtime_page_params_add_string_runtime(doc, root, "error_html", error_html)
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "invite_email", invite_email != NULL ? invite_email : "")
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "form_action", form_action != NULL ? form_action : "")) {
    yyjson_mut_doc_free(doc);
    free(error_html);
    free(target_html);
    return NULL;
  }
  params_json = runtime_page_params_write_runtime(doc, root);
  yyjson_mut_doc_free(doc);
  free(error_html);
  free(target_html);
  return params_json;
}
 
/**
 * @brief Builds template params for the invite-accepted confirmation page.
 *
 * @param continue_path Post-accept landing path.
 * @return Newly allocated compact JSON string, or NULL on failure.
 */
static char *invite_accept_done_page_params_json_dup_runtime(const char *continue_path) {
  yyjson_mut_doc *doc = yyjson_mut_doc_new(NULL);
  yyjson_mut_val *root = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  char *params_json = NULL;
  if (doc == NULL || root == NULL
      || !runtime_page_params_add_escaped_string_runtime(doc, root, "continue_path", continue_path != NULL ? continue_path : "/explore/")) {
    yyjson_mut_doc_free(doc);
    return NULL;
  }
  params_json = runtime_page_params_write_runtime(doc, root);
  yyjson_mut_doc_free(doc);
  return params_json;
}
 
static char *service_edit_page_params_json_dup_runtime(const char *state_path, const char *business_slug, long service_id) {
  yyjson_doc *state_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *business = NULL;
  yyjson_val *service = NULL;
  yyjson_val *services = NULL;
  yyjson_val *technicians = NULL;
  yyjson_mut_doc *doc = NULL;
  yyjson_mut_val *page = NULL;
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  char *sort_options_html = NULL;
  size_t sort_options_len = 0;
  size_t sort_options_cap = 0;
  char *option_rows_html = NULL;
  size_t option_rows_len = 0;
  size_t option_rows_cap = 0;
  char *technician_boxes_html = NULL;
  size_t technician_boxes_len = 0;
  size_t technician_boxes_cap = 0;
  char *service_name = NULL;
  char *service_description = NULL;
  char *service_cost = NULL;
  char *service_image = NULL;
  char *params_json = NULL;
  long business_id = 0;
  long service_duration = 45;
  long service_sort_order = 1;
  long service_count = 0;
  int technician_emitted = 0;
 
  if (state_path == NULL || business_slug == NULL || business_slug[0] == '\0' || service_id <= 0) {
    return NULL;
  }
  state_doc = native_json_doc_load_file(state_path);
  root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
  business_id = business != NULL ? native_json_obj_get_long_default(business, "id", 0, NULL) : 0;
  service = root != NULL ? find_service_for_business_runtime_local(root, service_id, business_id) : NULL;
  if (business == NULL || service == NULL) {
    native_json_doc_free(state_doc);
    return NULL;
  }
 
  service_name = native_json_obj_get_string_dup(service, "name");
  service_description = native_json_obj_get_string_dup(service, "description");
  service_cost = native_json_obj_get_string_dup(service, "cost");
  service_image = native_json_obj_get_string_dup(service, "image_url");
  service_duration = native_json_obj_get_long_default(service, "duration_minutes", 45, NULL);
  service_sort_order = native_json_obj_get_long_default(service, "sort_order", service_id, NULL);
  if (service_duration <= 0) service_duration = 45;
  if (service_sort_order <= 0) service_sort_order = service_id;
 
  services = state_array_runtime_local(root, "services");
  if (services != NULL && yyjson_arr_iter_init(services, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      if (yyjson_is_obj(row) && native_json_obj_get_long_default(row, "business_id", 0, NULL) == business_id) {
        service_count++;
      }
    }
  }
  if (service_count <= 0) service_count = 1;
  for (long index = 1; index <= service_count; index++) {
    if (!text_append_format_runtime_local(&sort_options_html, &sort_options_len, &sort_options_cap,
          "<option value=\"%ld\"%s>%ld</option>",
          index,
          index == service_sort_order ? " selected" : "",
          index)) {
      goto service_edit_cleanup;
    }
  }
 
  {
    yyjson_val *booking_options = native_json_obj_get(service, "booking_options");
    long option_index = 0;
    if (booking_options != NULL && yyjson_is_arr(booking_options) && yyjson_arr_iter_init(booking_options, &iter)) {
      while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
        char *label = native_json_obj_get_string_dup(row, "label");
        char *cost = native_json_obj_get_string_dup(row, "cost");
        long duration = native_json_obj_get_long_default(row, "duration_minutes", 0, NULL);
        option_index++;
        if (!text_append_format_runtime_local(&option_rows_html, &option_rows_len, &option_rows_cap,
              "<div class=\"stack\"><label>Option Label <input type=\"text\" name=\"booking_option_label_%ld\" value=\"%s\" class=\"form-control\"></label><label>Option Duration <input type=\"number\" name=\"booking_option_duration_%ld\" value=\"%ld\" class=\"form-control\"></label><label>Option Cost <input type=\"text\" name=\"booking_option_cost_%ld\" value=\"%s\" class=\"form-control\"></label></div>",
              option_index, label != NULL ? label : "", option_index, duration, option_index, cost != NULL ? cost : "")) {
          free(label);
          free(cost);
          goto service_edit_cleanup;
        }
        free(label);
        free(cost);
      }
    }
    if (option_index == 0) {
      if (!text_append_format_runtime_local(&option_rows_html, &option_rows_len, &option_rows_cap,
            "<input type=\"hidden\" name=\"booking_option_count\" value=\"0\">")) {
        goto service_edit_cleanup;
      }
    } else {
      char *wrapped_html = NULL;
      size_t wrapped_len = 0;
      size_t wrapped_cap = 0;
      if (!text_append_format_runtime_local(&wrapped_html, &wrapped_len, &wrapped_cap,
            "<input type=\"hidden\" name=\"booking_option_count\" value=\"%ld\"><div class=\"stack\">%s</div>",
            option_index,
            option_rows_html != NULL ? option_rows_html : "")) {
        free(wrapped_html);
        goto service_edit_cleanup;
      }
      free(option_rows_html);
      option_rows_html = wrapped_html;
      option_rows_len = wrapped_len;
      option_rows_cap = wrapped_cap;
    }
  }
 
  technicians = state_array_runtime_local(root, "technicians");
  if (technicians != NULL && yyjson_arr_iter_init(technicians, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      char *name = NULL;
      long technician_id = 0;
      int checked = 0;
      yyjson_val *assigned = native_json_obj_get(service, "technician_ids");
      yyjson_arr_iter assigned_iter;
      yyjson_val *assigned_value = NULL;
      if (!yyjson_is_obj(row) || native_json_obj_get_long_default(row, "business_id", 0, NULL) != business_id) {
        continue;
      }
      technician_id = native_json_obj_get_long_default(row, "id", 0, NULL);
      name = native_json_obj_get_string_dup(row, "name");
      if (assigned != NULL && yyjson_is_arr(assigned) && yyjson_arr_iter_init(assigned, &assigned_iter)) {
        while ((assigned_value = yyjson_arr_iter_next(&assigned_iter)) != NULL) {
          long assigned_id = 0;
          if (long_from_value_runtime_local(assigned_value, &assigned_id) && assigned_id == technician_id) {
            checked = 1;
            break;
          }
        }
      }
      if (!text_append_format_runtime_local(&technician_boxes_html, &technician_boxes_len, &technician_boxes_cap,
            "<label style=\"display:flex;gap:0.5rem;align-items:center;\"><input type=\"checkbox\" name=\"technician_%ld\" value=\"%ld\"%s> %s</label>",
            technician_id,
            technician_id,
            checked ? " checked" : "",
            name != NULL ? name : "")) {
        free(name);
        goto service_edit_cleanup;
      }
      technician_emitted = 1;
      free(name);
    }
  }
  if (!technician_emitted) {
    if (!text_append_format_runtime_local(&technician_boxes_html, &technician_boxes_len, &technician_boxes_cap,
          "<p>No technicians available for this business yet.</p>")) {
      goto service_edit_cleanup;
    }
  }
 
  doc = yyjson_mut_doc_new(NULL);
  page = doc != NULL ? yyjson_mut_obj(doc) : NULL;
  if (doc == NULL || page == NULL) {
    goto service_edit_cleanup;
  }
  yyjson_mut_doc_set_root(doc, page);
  {
    char save_path[256];
    char cancel_path[256];
    char duration_buffer[32];
    char visual_html[1024];
    snprintf(save_path, sizeof(save_path), "/businesses/%s/services/%ld/edit/", business_slug, service_id);
    snprintf(cancel_path, sizeof(cancel_path), "/businesses/%s/", business_slug);
    snprintf(duration_buffer, sizeof(duration_buffer), "%ld", service_duration);
    if (service_image != NULL && service_image[0] != '\0') {
      snprintf(visual_html, sizeof(visual_html), "<img src=\"%s\" alt=\"%s\" style=\"max-width:180px;border-radius:0.5rem;\">", service_image, service_name != NULL ? service_name : "Service image");
    } else {
      snprintf(visual_html, sizeof(visual_html), "<div class=\"card\">No image uploaded.</div>");
    }
    if (!yyjson_mut_obj_add_strcpy(doc, page, "save_path", save_path)
        || !yyjson_mut_obj_add_strcpy(doc, page, "cancel_path", cancel_path)
        || !yyjson_mut_obj_add_strcpy(doc, page, "service_visual_html", visual_html)
        || !yyjson_mut_obj_add_strcpy(doc, page, "service_name", service_name != NULL ? service_name : "")
        || !yyjson_mut_obj_add_strcpy(doc, page, "service_description", service_description != NULL ? service_description : "")
        || !yyjson_mut_obj_add_strcpy(doc, page, "service_cost", service_cost != NULL ? service_cost : "")
        || !yyjson_mut_obj_add_strcpy(doc, page, "service_duration", duration_buffer)
        || !yyjson_mut_obj_add_strcpy(doc, page, "service_sort_order_options_html", sort_options_html != NULL ? sort_options_html : "")
        || !yyjson_mut_obj_add_strcpy(doc, page, "booking_options_editor_html", option_rows_html != NULL ? option_rows_html : "")
        || !yyjson_mut_obj_add_strcpy(doc, page, "technician_checkboxes_html", technician_boxes_html != NULL ? technician_boxes_html : "")) {
      goto service_edit_cleanup;
    }
  }
  params_json = yyjson_mut_write(doc, YYJSON_WRITE_NOFLAG, NULL);
 
service_edit_cleanup:
  free(service_name);
  free(service_description);
  free(service_cost);
  free(service_image);
  free(sort_options_html);
  free(option_rows_html);
  free(technician_boxes_html);
  yyjson_mut_doc_free(doc);
  native_json_doc_free(state_doc);
  return params_json;
}
 
static int secure_text_equals(const char *left, const char *right) {
  size_t left_len;
  size_t right_len;
  size_t index;
  unsigned char diff = 0;
  if (left == NULL || right == NULL) {
    return 0;
  }
  left_len = strlen(left);
  right_len = strlen(right);
  if (left_len != right_len) {
    return 0;
  }
  for (index = 0; index < left_len; index++) {
    diff |= (unsigned char)(left[index] ^ right[index]);
  }
  return diff == 0;
}
 
#define SHA256_BLOCK_SIZE 64
#define SHA256_DIGEST_SIZE 32
 
typedef struct {
  uint8_t data[64];
  uint32_t datalen;
  uint64_t bitlen;
  uint32_t state[8];
} Sha256Runtime;
 
static uint32_t sha256_rotr(uint32_t value, uint32_t bits) {
  return (value >> bits) | (value << (32U - bits));
}
 
static void sha256_transform_runtime(Sha256Runtime *ctx, const uint8_t data[]) {
  static const uint32_t k[64] = {
    0x428a2f98U,0x71374491U,0xb5c0fbcfU,0xe9b5dba5U,0x3956c25bU,0x59f111f1U,0x923f82a4U,0xab1c5ed5U,
    0xd807aa98U,0x12835b01U,0x243185beU,0x550c7dc3U,0x72be5d74U,0x80deb1feU,0x9bdc06a7U,0xc19bf174U,
    0xe49b69c1U,0xefbe4786U,0x0fc19dc6U,0x240ca1ccU,0x2de92c6fU,0x4a7484aaU,0x5cb0a9dcU,0x76f988daU,
    0x983e5152U,0xa831c66dU,0xb00327c8U,0xbf597fc7U,0xc6e00bf3U,0xd5a79147U,0x06ca6351U,0x14292967U,
    0x27b70a85U,0x2e1b2138U,0x4d2c6dfcU,0x53380d13U,0x650a7354U,0x766a0abbU,0x81c2c92eU,0x92722c85U,
    0xa2bfe8a1U,0xa81a664bU,0xc24b8b70U,0xc76c51a3U,0xd192e819U,0xd6990624U,0xf40e3585U,0x106aa070U,
    0x19a4c116U,0x1e376c08U,0x2748774cU,0x34b0bcb5U,0x391c0cb3U,0x4ed8aa4aU,0x5b9cca4fU,0x682e6ff3U,
    0x748f82eeU,0x78a5636fU,0x84c87814U,0x8cc70208U,0x90befffaU,0xa4506cebU,0xbef9a3f7U,0xc67178f2U
  };
  uint32_t a, b, c, d, e, f, g, h;
  uint32_t m[64];
  uint32_t t1, t2;
  size_t index;
  for (index = 0; index < 16; index++) {
    m[index] = ((uint32_t)data[index * 4] << 24)
      | ((uint32_t)data[index * 4 + 1] << 16)
      | ((uint32_t)data[index * 4 + 2] << 8)
      | ((uint32_t)data[index * 4 + 3]);
  }
  for (index = 16; index < 64; index++) {
    uint32_t s0 = sha256_rotr(m[index - 15], 7) ^ sha256_rotr(m[index - 15], 18) ^ (m[index - 15] >> 3);
    uint32_t s1 = sha256_rotr(m[index - 2], 17) ^ sha256_rotr(m[index - 2], 19) ^ (m[index - 2] >> 10);
    m[index] = m[index - 16] + s0 + m[index - 7] + s1;
  }
  a = ctx->state[0]; b = ctx->state[1]; c = ctx->state[2]; d = ctx->state[3];
  e = ctx->state[4]; f = ctx->state[5]; g = ctx->state[6]; h = ctx->state[7];
  for (index = 0; index < 64; index++) {
    uint32_t s1 = sha256_rotr(e, 6) ^ sha256_rotr(e, 11) ^ sha256_rotr(e, 25);
    uint32_t ch = (e & f) ^ ((~e) & g);
    t1 = h + s1 + ch + k[index] + m[index];
    {
      uint32_t s0 = sha256_rotr(a, 2) ^ sha256_rotr(a, 13) ^ sha256_rotr(a, 22);
      uint32_t maj = (a & b) ^ (a & c) ^ (b & c);
      t2 = s0 + maj;
    }
    h = g;
    g = f;
    f = e;
    e = d + t1;
    d = c;
    c = b;
    b = a;
    a = t1 + t2;
  }
  ctx->state[0] += a; ctx->state[1] += b; ctx->state[2] += c; ctx->state[3] += d;
  ctx->state[4] += e; ctx->state[5] += f; ctx->state[6] += g; ctx->state[7] += h;
}
 
static void sha256_init_runtime(Sha256Runtime *ctx) {
  ctx->datalen = 0;
  ctx->bitlen = 0;
  ctx->state[0] = 0x6a09e667U;
  ctx->state[1] = 0xbb67ae85U;
  ctx->state[2] = 0x3c6ef372U;
  ctx->state[3] = 0xa54ff53aU;
  ctx->state[4] = 0x510e527fU;
  ctx->state[5] = 0x9b05688cU;
  ctx->state[6] = 0x1f83d9abU;
  ctx->state[7] = 0x5be0cd19U;
}
 
static void sha256_update_runtime(Sha256Runtime *ctx, const uint8_t *data, size_t len) {
  size_t index;
  for (index = 0; index < len; index++) {
    ctx->data[ctx->datalen++] = data[index];
    if (ctx->datalen == 64) {
      sha256_transform_runtime(ctx, ctx->data);
      ctx->bitlen += 512;
      ctx->datalen = 0;
    }
  }
}
 
static void sha256_final_runtime(Sha256Runtime *ctx, uint8_t hash[SHA256_DIGEST_SIZE]) {
  uint32_t index = ctx->datalen;
  if (ctx->datalen < 56) {
    ctx->data[index++] = 0x80;
    while (index < 56) ctx->data[index++] = 0x00;
  } else {
    ctx->data[index++] = 0x80;
    while (index < 64) ctx->data[index++] = 0x00;
    sha256_transform_runtime(ctx, ctx->data);
    memset(ctx->data, 0, 56);
  }
  ctx->bitlen += (uint64_t)ctx->datalen * 8U;
  ctx->data[63] = (uint8_t)(ctx->bitlen);
  ctx->data[62] = (uint8_t)(ctx->bitlen >> 8);
  ctx->data[61] = (uint8_t)(ctx->bitlen >> 16);
  ctx->data[60] = (uint8_t)(ctx->bitlen >> 24);
  ctx->data[59] = (uint8_t)(ctx->bitlen >> 32);
  ctx->data[58] = (uint8_t)(ctx->bitlen >> 40);
  ctx->data[57] = (uint8_t)(ctx->bitlen >> 48);
  ctx->data[56] = (uint8_t)(ctx->bitlen >> 56);
  sha256_transform_runtime(ctx, ctx->data);
  for (index = 0; index < 4; index++) {
    hash[index]      = (uint8_t)((ctx->state[0] >> (24 - index * 8)) & 0xffU);
    hash[index + 4]  = (uint8_t)((ctx->state[1] >> (24 - index * 8)) & 0xffU);
    hash[index + 8]  = (uint8_t)((ctx->state[2] >> (24 - index * 8)) & 0xffU);
    hash[index + 12] = (uint8_t)((ctx->state[3] >> (24 - index * 8)) & 0xffU);
    hash[index + 16] = (uint8_t)((ctx->state[4] >> (24 - index * 8)) & 0xffU);
    hash[index + 20] = (uint8_t)((ctx->state[5] >> (24 - index * 8)) & 0xffU);
    hash[index + 24] = (uint8_t)((ctx->state[6] >> (24 - index * 8)) & 0xffU);
    hash[index + 28] = (uint8_t)((ctx->state[7] >> (24 - index * 8)) & 0xffU);
  }
}
 
static void bytes_to_hex_runtime(const uint8_t *bytes, size_t len, char *hex_out) {
  static const char hex_chars[] = "0123456789abcdef";
  size_t index;
  for (index = 0; index < len; index++) {
    hex_out[index * 2] = hex_chars[(bytes[index] >> 4) & 0x0fU];
    hex_out[index * 2 + 1] = hex_chars[bytes[index] & 0x0fU];
  }
  hex_out[len * 2] = '\0';
}
 
static void hmac_sha256_runtime(const uint8_t *key, size_t key_len, const uint8_t *data, size_t data_len, uint8_t out[SHA256_DIGEST_SIZE]) {
  uint8_t key_block[SHA256_BLOCK_SIZE];
  uint8_t inner_hash[SHA256_DIGEST_SIZE];
  uint8_t ipad[SHA256_BLOCK_SIZE];
  uint8_t opad[SHA256_BLOCK_SIZE];
  Sha256Runtime ctx;
  size_t index;
  memset(key_block, 0, sizeof(key_block));
  if (key_len > SHA256_BLOCK_SIZE) {
    sha256_init_runtime(&ctx);
    sha256_update_runtime(&ctx, key, key_len);
    sha256_final_runtime(&ctx, key_block);
  } else if (key_len > 0) {
    memcpy(key_block, key, key_len);
  }
  for (index = 0; index < SHA256_BLOCK_SIZE; index++) {
    ipad[index] = (uint8_t)(key_block[index] ^ 0x36U);
    opad[index] = (uint8_t)(key_block[index] ^ 0x5cU);
  }
  sha256_init_runtime(&ctx);
  sha256_update_runtime(&ctx, ipad, sizeof(ipad));
  sha256_update_runtime(&ctx, data, data_len);
  sha256_final_runtime(&ctx, inner_hash);
  sha256_init_runtime(&ctx);
  sha256_update_runtime(&ctx, opad, sizeof(opad));
  sha256_update_runtime(&ctx, inner_hash, sizeof(inner_hash));
  sha256_final_runtime(&ctx, out);
}
 
static int pbkdf2_sha256_runtime(const uint8_t *password, size_t password_len, const uint8_t *salt, size_t salt_len, uint32_t iterations, uint8_t *out, size_t out_len) {
  uint32_t block_index = 1;
  size_t produced = 0;
  if (iterations == 0) {
    return 0;
  }
  while (produced < out_len) {
    uint8_t salt_block[512];
    uint8_t u[SHA256_DIGEST_SIZE];
    uint8_t t[SHA256_DIGEST_SIZE];
    size_t copy_len;
    uint32_t iter;
    if (salt_len + 4 > sizeof(salt_block)) {
      return 0;
    }
    memcpy(salt_block, salt, salt_len);
    salt_block[salt_len] = (uint8_t)((block_index >> 24) & 0xffU);
    salt_block[salt_len + 1] = (uint8_t)((block_index >> 16) & 0xffU);
    salt_block[salt_len + 2] = (uint8_t)((block_index >> 8) & 0xffU);
    salt_block[salt_len + 3] = (uint8_t)(block_index & 0xffU);
    hmac_sha256_runtime(password, password_len, salt_block, salt_len + 4, u);
    memcpy(t, u, sizeof(t));
    for (iter = 1; iter < iterations; iter++) {
      size_t index;
      hmac_sha256_runtime(password, password_len, u, sizeof(u), u);
      for (index = 0; index < sizeof(t); index++) {
        t[index] ^= u[index];
      }
    }
    copy_len = (out_len - produced) < sizeof(t) ? (out_len - produced) : sizeof(t);
    memcpy(out + produced, t, copy_len);
    produced += copy_len;
    block_index++;
  }
  return 1;
}
 
static int verify_password_hash_runtime(const char *stored_hash, const char *password_value, const char *username_value) {
  if (stored_hash == NULL || password_value == NULL) {
    return 0;
  }
  if (strncmp(stored_hash, "pharos-pbkdf2-sha256$", strlen("pharos-pbkdf2-sha256$")) == 0) {
    char *copy = strdup(stored_hash);
    char *saveptr = NULL;
    char *algorithm;
    char *iterations_text;
    char *salt_text;
    char *expected_hex;
    uint8_t derived[SHA256_DIGEST_SIZE];
    char derived_hex[SHA256_DIGEST_SIZE * 2 + 1];
    uint32_t iterations;
    int ok = 0;
    if (copy == NULL) {
      return 0;
    }
    algorithm = strtok_r(copy, "$", &saveptr);
    iterations_text = strtok_r(NULL, "$", &saveptr);
    salt_text = strtok_r(NULL, "$", &saveptr);
    expected_hex = strtok_r(NULL, "$", &saveptr);
    if (algorithm != NULL && iterations_text != NULL && salt_text != NULL && expected_hex != NULL) {
      iterations = (uint32_t)strtoul(iterations_text, NULL, 10);
      if (iterations > 0 && pbkdf2_sha256_runtime((const uint8_t *)password_value, strlen(password_value), (const uint8_t *)salt_text, strlen(salt_text), iterations, derived, sizeof(derived))) {
        bytes_to_hex_runtime(derived, sizeof(derived), derived_hex);
        ok = secure_text_equals(derived_hex, expected_hex);
      }
    }
    free(copy);
    return ok;
  }
  if (strncmp(stored_hash, "dev$", 4) == 0) {
    char *copy = strdup(stored_hash);
    char *saveptr = NULL;
    char *prefix;
    char *legacy_username;
    char *legacy_password;
    int ok = 0;
    if (copy == NULL) {
      return 0;
    }
    prefix = strtok_r(copy, "$", &saveptr);
    legacy_username = strtok_r(NULL, "$", &saveptr);
    legacy_password = saveptr;
    (void)prefix;
    if (legacy_password != NULL) {
      if (username_value != NULL && username_value[0] != '\0' && legacy_username != NULL && !streq(legacy_username, username_value)) {
        ok = 0;
      } else {
        ok = secure_text_equals(legacy_password, password_value);
      }
    }
    free(copy);
    return ok;
  }
  return 0;
}
 
static char *sha256_hex_dup_runtime(const char *value) {
  Sha256Runtime ctx;
  uint8_t digest[SHA256_DIGEST_SIZE];
  char *hex = NULL;
  if (value == NULL) {
    return NULL;
  }
  hex = (char *)malloc(SHA256_DIGEST_SIZE * 2 + 1);
  if (hex == NULL) {
    return NULL;
  }
  sha256_init_runtime(&ctx);
  sha256_update_runtime(&ctx, (const uint8_t *)value, strlen(value));
  sha256_final_runtime(&ctx, digest);
  bytes_to_hex_runtime(digest, sizeof(digest), hex);
  return hex;
}
 
static char *token_hash_dup_runtime(const char *token_value) {
  char *sha_hex = NULL;
  char *out = NULL;
  size_t needed;
  if (token_value == NULL || token_value[0] == '\0') {
    return NULL;
  }
  sha_hex = sha256_hex_dup_runtime(token_value);
  if (sha_hex == NULL) {
    return NULL;
  }
  needed = strlen("pharos-sha256$") + strlen(sha_hex) + 1;
  out = (char *)malloc(needed);
  if (out != NULL) {
    snprintf(out, needed, "pharos-sha256$%s", sha_hex);
  }
  free(sha_hex);
  return out;
}
 
static char *password_hash_dup_runtime(const char *password_value) {
  const uint32_t iterations = 310000;
  char salt_text[33];
  uint8_t derived[SHA256_DIGEST_SIZE];
  char derived_hex[SHA256_DIGEST_SIZE * 2 + 1];
  char *out = NULL;
  size_t needed;
  if (password_value == NULL || password_value[0] == '\0') {
    return NULL;
  }
  csrf_generate_random_hex(salt_text, 16);
  if (!pbkdf2_sha256_runtime((const uint8_t *)password_value, strlen(password_value), (const uint8_t *)salt_text, strlen(salt_text), iterations, derived, sizeof(derived))) {
    return NULL;
  }
  bytes_to_hex_runtime(derived, sizeof(derived), derived_hex);
  needed = strlen("pharos-pbkdf2-sha256$") + 10 + 1 + strlen(salt_text) + 1 + strlen(derived_hex) + 1;
  out = (char *)malloc(needed);
  if (out != NULL) {
    snprintf(out, needed, "pharos-pbkdf2-sha256$%u$%s$%s", iterations, salt_text, derived_hex);
  }
  return out;
}
 
static int now_iso_utc_runtime(char out[21]) {
  time_t now = time(NULL);
  struct tm tm_value;
#if defined(_WIN32)
  if (gmtime_s(&tm_value, &now) != 0) return 0;
#else
  if (gmtime_r(&now, &tm_value) == NULL) return 0;
#endif
  return strftime(out, 21, "%Y-%m-%dT%H:%M:%SZ", &tm_value) == 20;
}
 
static int iso_after_seconds_runtime(long delta_seconds, char out[21]) {
  time_t now = time(NULL) + (time_t)delta_seconds;
  struct tm tm_value;
#if defined(_WIN32)
  if (gmtime_s(&tm_value, &now) != 0) return 0;
#else
  if (gmtime_r(&now, &tm_value) == NULL) return 0;
#endif
  return strftime(out, 21, "%Y-%m-%dT%H:%M:%SZ", &tm_value) == 20;
}
 
static yyjson_val *state_array_runtime_local(yyjson_val *root, const char *field_name) {
  yyjson_val *value = native_json_obj_get(root, field_name);
  return value != NULL && yyjson_is_arr(value) ? value : NULL;
}
 
static yyjson_val *find_user_by_username_runtime_local(yyjson_val *root, const char *username) {
  yyjson_val *users = state_array_runtime_local(root, "users");
  yyjson_arr_iter iter;
  yyjson_val *user = NULL;
  if (users == NULL || username == NULL || !yyjson_arr_iter_init(users, &iter)) {
    return NULL;
  }
  while ((user = yyjson_arr_iter_next(&iter)) != NULL) {
    yyjson_val *username_value = native_json_obj_get(user, "username");
    if (yyjson_is_str(username_value) && yyjson_equals_str(username_value, username)) {
      return user;
    }
  }
  return NULL;
}
 
static yyjson_val *find_user_by_id_runtime_local(yyjson_val *root, long user_id) {
  yyjson_val *users = state_array_runtime_local(root, "users");
  yyjson_arr_iter iter;
  yyjson_val *user = NULL;
  if (users == NULL || !yyjson_arr_iter_init(users, &iter)) {
    return NULL;
  }
  while ((user = yyjson_arr_iter_next(&iter)) != NULL) {
    if (native_json_obj_get_long_default(user, "id", 0, NULL) == user_id) {
      return user;
    }
  }
  return NULL;
}
 
static yyjson_val *find_business_by_slug_runtime_local(yyjson_val *root, const char *business_slug) {
  yyjson_val *businesses = state_array_runtime_local(root, "businesses");
  yyjson_arr_iter iter;
  yyjson_val *business = NULL;
  if (businesses == NULL || business_slug == NULL || !yyjson_arr_iter_init(businesses, &iter)) {
    return NULL;
  }
  while ((business = yyjson_arr_iter_next(&iter)) != NULL) {
    yyjson_val *slug_value = native_json_obj_get(business, "slug");
    if (yyjson_is_str(slug_value) && yyjson_equals_str(slug_value, business_slug)) {
      return business;
    }
  }
  return NULL;
}
 
/**
 * @brief Finds one business record by numeric id in the runtime state.
 *
 * @param root Loaded runtime state root.
 * @param business_id Business id to match.
 * @return Matching business object, or NULL when not found.
 */
static yyjson_val *find_business_by_id_runtime_local(yyjson_val *root, long business_id) {
  yyjson_val *businesses = state_array_runtime_local(root, "businesses");
  yyjson_arr_iter iter;
  yyjson_val *business = NULL;
  if (businesses == NULL || !yyjson_arr_iter_init(businesses, &iter)) {
    return NULL;
  }
  while ((business = yyjson_arr_iter_next(&iter)) != NULL) {
    if (yyjson_is_obj(business) && native_json_obj_get_long_default(business, "id", 0, NULL) == business_id) {
      return business;
    }
  }
  return NULL;
}
 
static int long_from_value_runtime_local(yyjson_val *value, long *out_value) {
  if (out_value != NULL) {
    *out_value = 0;
  }
  if (value == NULL) {
    return 0;
  }
  if (yyjson_is_int(value) || yyjson_is_uint(value) || yyjson_is_real(value)) {
    if (out_value != NULL) {
      *out_value = yyjson_get_sint(value);
    }
    return 1;
  }
  return 0;
}
 
static int value_long_equals_runtime_local(yyjson_val *value, long expected_value) {
  long actual_value = 0;
  return long_from_value_runtime_local(value, &actual_value) && actual_value == expected_value;
}
 
static yyjson_val *find_service_for_business_runtime_local(yyjson_val *root, long service_id, long business_id) {
  yyjson_val *services = state_array_runtime_local(root, "services");
  yyjson_arr_iter iter;
  yyjson_val *service = NULL;
  if (services == NULL || !yyjson_arr_iter_init(services, &iter)) {
    return NULL;
  }
  while ((service = yyjson_arr_iter_next(&iter)) != NULL) {
    if (!yyjson_is_obj(service)) {
      continue;
    }
    if (native_json_obj_get_long_default(service, "id", 0, NULL) == service_id
        && native_json_obj_get_long_default(service, "business_id", 0, NULL) == business_id) {
      return service;
    }
  }
  return NULL;
}
 
static yyjson_val *find_appointment_by_id_runtime_local(yyjson_val *root, long appointment_id) {
  yyjson_val *appointments = state_array_runtime_local(root, "appointments");
  yyjson_arr_iter iter;
  yyjson_val *appointment = NULL;
  if (appointments == NULL || !yyjson_arr_iter_init(appointments, &iter)) {
    return NULL;
  }
  while ((appointment = yyjson_arr_iter_next(&iter)) != NULL) {
    if (yyjson_is_obj(appointment) && native_json_obj_get_long_default(appointment, "id", 0, NULL) == appointment_id) {
      return appointment;
    }
  }
  return NULL;
}
 
static int parse_ymd_runtime_local(const char *date_value, int *year_out, int *month_out, int *day_out) {
  int year = 0;
  int month = 0;
  int day = 0;
  if (year_out != NULL) *year_out = 0;
  if (month_out != NULL) *month_out = 0;
  if (day_out != NULL) *day_out = 0;
  if (date_value == NULL || sscanf(date_value, "%d-%d-%d", &year, &month, &day) != 3 || month < 1 || month > 12 || day < 1 || day > 31) {
    return 0;
  }
  if (year_out != NULL) *year_out = year;
  if (month_out != NULL) *month_out = month;
  if (day_out != NULL) *day_out = day;
  return 1;
}
 
static int time_ranges_overlap_runtime_local(int start_a_minutes, int duration_a, int start_b_minutes, int duration_b) {
  int end_a_minutes = start_a_minutes + duration_a;
  int end_b_minutes = start_b_minutes + duration_b;
  return start_a_minutes < end_b_minutes && start_b_minutes < end_a_minutes;
}
 
static const char *day_abbrev_for_ymd_runtime_local(int year, int month, int day) {
  static const char *names[] = {"Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"};
  static const int offsets[] = {0, 3, 2, 5, 0, 3, 5, 1, 4, 6, 2, 4};
  int adjusted_year = year;
  int weekday = 0;
  if (month < 3) {
    adjusted_year -= 1;
  }
  weekday = (adjusted_year + adjusted_year / 4 - adjusted_year / 100 + adjusted_year / 400 + offsets[month - 1] + day) % 7;
  if (weekday < 0 || weekday > 6) {
    return NULL;
  }
  return names[weekday];
}
 
static int business_open_for_slot_runtime_local(yyjson_val *root, long business_id, const char *date_value, const char *time_value, long duration_minutes) {
  yyjson_val *availability_rows = state_array_runtime_local(root, "business_availability");
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  int year = 0;
  int month = 0;
  int day = 0;
  int slot_start = 0;
  int slot_end = 0;
  const char *day_name = NULL;
  if (root == NULL || business_id <= 0 || duration_minutes <= 0 || !parse_ymd_runtime_local(date_value, &year, &month, &day) || !time_text_to_minutes_runtime(time_value, &slot_start)) {
    return 0;
  }
  day_name = day_abbrev_for_ymd_runtime_local(year, month, day);
  slot_end = slot_start + (int)duration_minutes;
  if (availability_rows != NULL && yyjson_arr_iter_init(availability_rows, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      char *row_day = NULL;
      char *start_text = NULL;
      char *end_text = NULL;
      int start_minutes = 0;
      int end_minutes = 0;
      int matches = 0;
      if (!yyjson_is_obj(row) || !value_long_equals_runtime_local(native_json_obj_get(row, "business_id"), business_id)) {
        continue;
      }
      row_day = native_json_obj_get_string_dup(row, "day_of_week");
      start_text = native_json_obj_get_string_dup(row, "start_time");
      end_text = native_json_obj_get_string_dup(row, "end_time");
      matches = row_day != NULL && day_name != NULL && streq(row_day, day_name)
        && time_text_to_minutes_runtime(start_text, &start_minutes)
        && time_text_to_minutes_runtime(end_text, &end_minutes)
        && slot_start >= start_minutes && slot_end <= end_minutes;
      free(row_day);
      free(start_text);
      free(end_text);
      if (matches) {
        return 1;
      }
    }
  }
  return 0;
}
 
static int technician_booked_for_slot_runtime_local(yyjson_val *root, long technician_id, const char *date_value, const char *time_value, long duration_minutes) {
  yyjson_val *appointments = state_array_runtime_local(root, "appointments");
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  int slot_start = 0;
  if (root == NULL || technician_id <= 0 || duration_minutes <= 0 || !time_text_to_minutes_runtime(time_value, &slot_start)) {
    return 0;
  }
  if (appointments != NULL && yyjson_arr_iter_init(appointments, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      char *existing_date = NULL;
      char *existing_time = NULL;
      char *existing_status = NULL;
      long service_id = 0;
      yyjson_val *service = NULL;
      int existing_start = 0;
      int existing_duration = 45;
      int matches = 0;
      if (!yyjson_is_obj(row) || !value_long_equals_runtime_local(native_json_obj_get(row, "technician_id"), technician_id)) {
        continue;
      }
      existing_date = native_json_obj_get_string_dup(row, "date");
      existing_time = native_json_obj_get_string_dup(row, "time");
      existing_status = native_json_obj_get_string_dup(row, "status");
      if (existing_status != NULL && streq(existing_status, "cancelled")) {
        free(existing_date);
        free(existing_time);
        free(existing_status);
        continue;
      }
      service_id = native_json_obj_get_long_default(row, "service_id", 0, NULL);
      service = find_service_for_business_runtime_local(root, service_id, native_json_obj_get_long_default(row, "business_id", 0, NULL));
      if (service != NULL) {
        existing_duration = (int)native_json_obj_get_long_default(service, "duration_minutes", 45, NULL);
      }
      matches = existing_date != NULL && streq(existing_date, date_value != NULL ? date_value : "")
        && time_text_to_minutes_runtime(existing_time, &existing_start)
        && time_ranges_overlap_runtime_local(slot_start, (int)duration_minutes, existing_start, existing_duration);
      free(existing_date);
      free(existing_time);
      free(existing_status);
      if (matches) {
        return 1;
      }
    }
  }
  return 0;
}
 
static long assign_technician_for_slot_runtime_local(yyjson_val *root, long business_id, long service_id, const char *date_value, const char *time_value) {
  yyjson_val *service = find_service_for_business_runtime_local(root, service_id, business_id);
  yyjson_val *technician_ids = service != NULL ? native_json_obj_get_array(service, "technician_ids") : NULL;
  yyjson_val *availability_rows = state_array_runtime_local(root, "technician_availability");
  yyjson_arr_iter tech_iter;
  yyjson_val *tech_value = NULL;
  int year = 0;
  int month = 0;
  int day = 0;
  int slot_start = 0;
  int slot_end = 0;
  int duration_minutes = 45;
  const char *day_name = NULL;
  if (service != NULL) {
    duration_minutes = (int)native_json_obj_get_long_default(service, "duration_minutes", 45, NULL);
  }
  if (duration_minutes <= 0) {
    duration_minutes = 45;
  }
  if (root == NULL || business_id <= 0 || service_id <= 0 || technician_ids == NULL || !yyjson_is_arr(technician_ids) || !parse_ymd_runtime_local(date_value, &year, &month, &day) || !time_text_to_minutes_runtime(time_value, &slot_start)) {
    return 0;
  }
  day_name = day_abbrev_for_ymd_runtime_local(year, month, day);
  slot_end = slot_start + duration_minutes;
  if (yyjson_arr_iter_init(technician_ids, &tech_iter)) {
    while ((tech_value = yyjson_arr_iter_next(&tech_iter)) != NULL) {
      long technician_id = 0;
      yyjson_arr_iter avail_iter;
      yyjson_val *row = NULL;
      if (!long_from_value_runtime_local(tech_value, &technician_id) || technician_id <= 0) {
        continue;
      }
      if (availability_rows != NULL && yyjson_arr_iter_init(availability_rows, &avail_iter)) {
        while ((row = yyjson_arr_iter_next(&avail_iter)) != NULL) {
          char *row_day = NULL;
          char *start_text = NULL;
          char *end_text = NULL;
          int start_minutes = 0;
          int end_minutes = 0;
          int available = 0;
          if (!yyjson_is_obj(row) || !value_long_equals_runtime_local(native_json_obj_get(row, "technician_id"), technician_id)) {
            continue;
          }
          row_day = native_json_obj_get_string_dup(row, "day_of_week");
          start_text = native_json_obj_get_string_dup(row, "start_time");
          end_text = native_json_obj_get_string_dup(row, "end_time");
          available = row_day != NULL && day_name != NULL && streq(row_day, day_name)
            && time_text_to_minutes_runtime(start_text, &start_minutes)
            && time_text_to_minutes_runtime(end_text, &end_minutes)
            && slot_start >= start_minutes && slot_end <= end_minutes;
          free(row_day);
          free(start_text);
          free(end_text);
          if (available && !technician_booked_for_slot_runtime_local(root, technician_id, date_value, time_value, duration_minutes)) {
            return technician_id;
          }
        }
      }
    }
  }
  return 0;
}
 
static long next_array_id_runtime_local(yyjson_val *rows) {
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  long next_id = 1;
  if (rows != NULL && yyjson_arr_iter_init(rows, &iter)) {
    while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
      long existing_id = native_json_obj_get_long_default(row, "id", 0, NULL);
      if (existing_id >= next_id) {
        next_id = existing_id + 1;
      }
    }
  }
  return next_id;
}
 
/**
 * @brief Resolves the tenant id that owns a business record.
 *
 * @param root Loaded runtime state root.
 * @param business_id Business id to map.
 * @return Matching tenant id, or 0 when not found.
 */
static long state_tenant_id_for_business_runtime_local(yyjson_val *root, long business_id) {
  yyjson_val *tenants = state_array_runtime_local(root, "tenants");
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  if (tenants == NULL || business_id <= 0 || !yyjson_arr_iter_init(tenants, &iter)) {
    return 0;
  }
  while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
    if (!yyjson_is_obj(row)) {
      continue;
    }
    if (native_json_obj_get_long_default(row, "source_business_id", 0, NULL) == business_id) {
      return native_json_obj_get_long_default(row, "id", 0, NULL);
    }
  }
  return 0;
}
 
/**
 * @brief Checks whether a user has an active membership on a tenant.
 *
 * @param root Loaded runtime state root.
 * @param user_id User id to test.
 * @param tenant_id Tenant id to test.
 * @return 1 when active, otherwise 0.
 */
static int user_has_active_tenant_membership_runtime_local(yyjson_val *root, long user_id, long tenant_id) {
  yyjson_val *memberships = state_array_runtime_local(root, "tenant_memberships");
  yyjson_arr_iter iter;
  yyjson_val *row = NULL;
  if (memberships == NULL || user_id <= 0 || tenant_id <= 0 || !yyjson_arr_iter_init(memberships, &iter)) {
    return 0;
  }
  while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
    const char *membership_status = NULL;
    if (!yyjson_is_obj(row)) {
      continue;
    }
    if (native_json_obj_get_long_default(row, "user_id", 0, NULL) != user_id
        || native_json_obj_get_long_default(row, "tenant_id", 0, NULL) != tenant_id) {
      continue;
    }
    membership_status = yyjson_get_str(native_json_obj_get(row, "membership_status"));
    if (membership_status == NULL || membership_status[0] == '\0' || streq(membership_status, "active")) {
      return 1;
    }
  }
  return 0;
}
 
/**
 * @brief Maps invite role hints onto the canonical tenant membership role id.
 *
 * @param role_hint Requested invite role hint.
 * @param account_type Requested invite account type.
 * @return Canonical role id string.
 */
static const char *membership_role_id_for_invite_runtime_local(const char *role_hint, const char *account_type) {
  if (role_hint != NULL && role_hint[0] != '\0') {
    if (streq(role_hint, "owner") || streq(role_hint, "business_owner")) {
      return "business_owner";
    }
    if (streq(role_hint, "manager") || streq(role_hint, "business_manager")) {
      return "business_manager";
    }
    if (streq(role_hint, "technician") || streq(role_hint, "business_technician")) {
      return "business_technician";
    }
    if (streq(role_hint, "customer") || streq(role_hint, "business_customer")) {
      return "business_customer";
    }
  }
  if (account_type != NULL && account_type[0] != '\0') {
    if (streq(account_type, "business_owner")) {
      return "business_owner";
    }
    if (streq(account_type, "business_manager")) {
      return "business_manager";
    }
    if (streq(account_type, "business_technician")) {
      return "business_technician";
    }
  }
  return "business_customer";
}
 
/**
 * @brief Appends a native auth/rate-limit event row to runtime state.
 *
 * @param state_path Runtime state JSON path.
 * @param policy_key Policy identifier.
 * @param bucket_key Bucket key or actor key.
 * @param outcome Result label.
 * @return 0 on success, otherwise non-zero.
 */
static int persist_app_state_text_runtime_local(const AppRuntime *app, const char *state_json_text) {
  int code = 69;
  char *backend = NULL;
  char *export_json = NULL;
  if (app == NULL || app->state_path == NULL || state_json_text == NULL) {
    return 69;
  }
  code = write_text_file(app->state_path, state_json_text);
  if (code != 0) {
    return code;
  }
  if (app->app_root != NULL && app->app_id != NULL) {
    backend = native_dynamic_relational_backend_dup(app->app_root, app->runtime_conf_path);
    if (backend != NULL) {
      code = native_dynamic_relational_runtime_import_state(app->app_root, app->runtime_conf_path, app->app_id, app->state_path, NULL);
      if (code != 0) {
        free(backend);
        return code;
      }
      export_json = native_dynamic_relational_runtime_export_json_dup(app->app_root, app->runtime_conf_path, app->app_id);
      if (export_json != NULL) {
        code = write_text_file(app->state_path, export_json);
      }
      free(export_json);
      free(backend);
      if (code != 0) {
        return code;
      }
    }
  }
  return 0;
}
 
static int append_rate_limit_event_runtime_local(const AppRuntime *app, const char *policy_key, const char *bucket_key, const char *outcome) {
  yyjson_doc *doc = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *events = NULL;
  yyjson_mut_val *event_obj = NULL;
  yyjson_val *source_events = NULL;
  char created_at[21];
  char *text = NULL;
  int code = 69;
  if (app == NULL || app->state_path == NULL || policy_key == NULL || policy_key[0] == '\0' || !now_iso_utc_runtime(created_at)) {
    return 69;
  }
  doc = native_json_doc_load_file(app->state_path);
  mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
  mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
  source_events = doc != NULL ? state_array_runtime_local(yyjson_doc_get_root(doc), "rate_limit_events") : NULL;
  events = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "rate_limit_events") : NULL;
  if (mut_doc == NULL || mut_root == NULL || !yyjson_mut_is_obj(mut_root)) {
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return 69;
  }
  if (events == NULL || !yyjson_mut_is_arr(events)) {
    events = yyjson_mut_arr(mut_doc);
    if (events == NULL || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "rate_limit_events"), events)) {
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      return 69;
    }
  }
  event_obj = yyjson_mut_obj(mut_doc);
  if (event_obj == NULL
      || !yyjson_mut_obj_add_int(mut_doc, event_obj, "id", next_array_id_runtime_local(source_events))
      || !yyjson_mut_obj_add_strcpy(mut_doc, event_obj, "policy_key", policy_key)
      || !yyjson_mut_obj_add_strcpy(mut_doc, event_obj, "bucket_key", bucket_key != NULL ? bucket_key : "")
      || !yyjson_mut_obj_add_strcpy(mut_doc, event_obj, "outcome", outcome != NULL ? outcome : "observed")
      || !yyjson_mut_obj_add_strcpy(mut_doc, event_obj, "created_at", created_at)
      || !yyjson_mut_arr_append(events, event_obj)) {
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return 69;
  }
  text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
  if (text != NULL) {
    code = persist_app_state_text_runtime_local(app, text);
  }
  free(text);
  native_json_doc_free(doc);
  yyjson_mut_doc_free(mut_doc);
  return code;
}
 
static long active_user_id_from_cookie_runtime(const char *state_path, const char *cookie_header) {
  yyjson_doc *doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *sessions = NULL;
  yyjson_arr_iter iter;
  yyjson_val *session = NULL;
  char *session_token = NULL;
  char *session_token_hash = NULL;
  char now_iso[21];
  long user_id = 0;
  if (state_path == NULL || cookie_header == NULL || !now_iso_utc_runtime(now_iso)) {
    return 0;
  }
  session_token = native_dynamic_cookie_value(cookie_header, SESSION_COOKIE_NAME);
  if (session_token == NULL || session_token[0] == '\0') {
    free(session_token);
    return 0;
  }
  session_token_hash = token_hash_dup_runtime(session_token);
  free(session_token);
  if (session_token_hash == NULL) {
    return 0;
  }
  doc = native_json_doc_load_file(state_path);
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  sessions = root != NULL ? state_array_runtime_local(root, "sessions") : NULL;
  if (sessions != NULL && yyjson_arr_iter_init(sessions, &iter)) {
    while ((session = yyjson_arr_iter_next(&iter)) != NULL) {
      yyjson_val *hash_value = native_json_obj_get(session, "session_token_hash");
      char *expires_at = NULL;
      char *revoked_at = NULL;
      if (!yyjson_is_obj(session) || !yyjson_is_str(hash_value) || !yyjson_equals_str(hash_value, session_token_hash)) {
        continue;
      }
      expires_at = native_json_obj_get_string_dup(session, "expires_at");
      revoked_at = native_json_obj_get_string_dup(session, "revoked_at");
      if ((revoked_at == NULL || revoked_at[0] == '\0') && expires_at != NULL && strcmp(expires_at, now_iso) > 0) {
        user_id = native_json_obj_get_long_default(session, "user_id", 0, NULL);
        free(expires_at);
        free(revoked_at);
        break;
      }
      free(expires_at);
      free(revoked_at);
    }
  }
  free(session_token_hash);
  native_json_doc_free(doc);
  return user_id;
}
 
static char *session_cookie_header_dup_runtime(const AppRuntime *app, const HttpRequest *request, const char *session_token, int clear_cookie) {
  const char *base_path = app != NULL && app->base_path != NULL && app->base_path[0] != '\0' ? app->base_path : "";
  const char *same_site = "Lax";
  const char *headers = request != NULL ? request->headers : NULL;
  int secure = headers != NULL && (strstr(headers, "X-Forwarded-Proto:https") != NULL || strstr(headers, "X-Forwarded-Proto: https") != NULL || strstr(headers, "Origin:https://") != NULL || strstr(headers, "Origin: https://") != NULL);
  const char *path_suffix = (base_path[0] == '\0' || streq(base_path, "/")) ? "/" : NULL;
  const char *token = clear_cookie ? "" : (session_token != NULL ? session_token : "");
  const char *max_age = clear_cookie ? "0" : "604800";
  char *header = NULL;
  size_t needed;
  needed = strlen("Set-Cookie: ") + strlen(SESSION_COOKIE_NAME) + 1 + strlen(token)
    + strlen("; Path=") + (path_suffix != NULL ? strlen(path_suffix) : strlen(base_path) + 1)
    + strlen("; Max-Age=") + strlen(max_age)
    + strlen("; HttpOnly; SameSite=") + strlen(same_site)
    + (secure ? strlen("; Secure") : 0) + 1;
  header = (char *)malloc(needed);
  if (header == NULL) {
    return NULL;
  }
  snprintf(header, needed, "Set-Cookie: %s=%s; Path=%s%s; Max-Age=%s; HttpOnly; SameSite=%s%s",
    SESSION_COOKIE_NAME,
    token,
    path_suffix != NULL ? path_suffix : base_path,
    path_suffix != NULL ? "" : "/",
    max_age,
    same_site,
    secure ? "; Secure" : "");
  return header;
}
 
static const char *default_signed_in_path_runtime(yyjson_val *user) {
  const char *account_type = yyjson_get_str(native_json_obj_get(user, "account_type"));
  if (account_type != NULL && (streq(account_type, "business_owner") || streq(account_type, "business_manager") || streq(account_type, "business_technician"))) {
    return "/businesses/";
  }
  return "/explore/";
}
 
static int revoke_session_by_cookie_runtime(const AppRuntime *app, const char *cookie_header) {
  yyjson_doc *doc = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *sessions = NULL;
  yyjson_mut_val *session = NULL;
  char *session_token = NULL;
  char *session_token_hash = NULL;
  char revoked_at[21];
  size_t idx = 0;
  size_t max = 0;
  int changed = 0;
  if (app == NULL || app->state_path == NULL || cookie_header == NULL || !now_iso_utc_runtime(revoked_at)) {
    return 0;
  }
  session_token = native_dynamic_cookie_value(cookie_header, SESSION_COOKIE_NAME);
  if (session_token == NULL || session_token[0] == '\0') {
    free(session_token);
    return 0;
  }
  session_token_hash = token_hash_dup_runtime(session_token);
  free(session_token);
  if (session_token_hash == NULL) {
    return 69;
  }
  doc = native_json_doc_load_file(app->state_path);
  mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
  mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
  sessions = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "sessions") : NULL;
  if (sessions != NULL && yyjson_mut_is_arr(sessions)) {
    yyjson_mut_arr_foreach(sessions, idx, max, session) {
      yyjson_mut_val *hash_value = yyjson_mut_obj_get(session, "session_token_hash");
      yyjson_mut_val *revoked_value = yyjson_mut_obj_get(session, "revoked_at");
      if (!yyjson_mut_is_obj(session)) continue;
      if (hash_value != NULL && yyjson_is_str((yyjson_val *)hash_value) && yyjson_equals_str((yyjson_val *)hash_value, session_token_hash)
          && (revoked_value == NULL || yyjson_is_null((yyjson_val *)revoked_value) || (yyjson_is_str((yyjson_val *)revoked_value) && yyjson_get_len((yyjson_val *)revoked_value) == 0))) {
        if (!yyjson_mut_obj_put(session, yyjson_mut_strcpy(mut_doc, "revoked_at"), yyjson_mut_strcpy(mut_doc, revoked_at))) {
          free(session_token_hash);
          native_json_doc_free(doc);
          yyjson_mut_doc_free(mut_doc);
          return 69;
        }
        changed = 1;
      }
    }
  }
  free(session_token_hash);
  if (changed) {
    char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
    int code = text != NULL ? persist_app_state_text_runtime_local(app, text) : 69;
    free(text);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return code;
  }
  native_json_doc_free(doc);
  yyjson_mut_doc_free(mut_doc);
  return 0;
}
 
static int issue_browser_session_runtime(const AppRuntime *app, const HttpRequest *request, long user_id, char **session_token_out, char **session_cookie_header_out) {
  yyjson_doc *doc = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *sessions = NULL;
  yyjson_mut_val *session_obj = NULL;
  yyjson_val *existing_sessions = NULL;
  yyjson_arr_iter existing_iter;
  yyjson_val *item = NULL;
  long session_id = 1;
  char *session_token = NULL;
  char *session_token_hash = NULL;
  char created_at[21];
  char expires_at[21];
  char *text = NULL;
  size_t idx = 0;
  if (session_token_out != NULL) *session_token_out = NULL;
  if (session_cookie_header_out != NULL) *session_cookie_header_out = NULL;
  if (app == NULL || app->state_path == NULL || user_id <= 0 || !now_iso_utc_runtime(created_at) || !iso_after_seconds_runtime(604800, expires_at)) {
    return 69;
  }
  session_token = (char *)malloc(CSRF_TOKEN_HEX_LEN + 1);
  if (session_token == NULL) {
    return 69;
  }
  csrf_generate_random_hex(session_token, 24);
  session_token_hash = token_hash_dup_runtime(session_token);
  if (session_token_hash == NULL) {
    free(session_token);
    return 69;
  }
  doc = native_json_doc_load_file(app->state_path);
  existing_sessions = doc != NULL ? state_array_runtime_local(yyjson_doc_get_root(doc), "sessions") : NULL;
  mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
  mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
  if (mut_doc == NULL || mut_root == NULL || !yyjson_mut_is_obj(mut_root)) {
    free(session_token_hash);
    free(session_token);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return 69;
  }
  sessions = yyjson_mut_obj_get(mut_root, "sessions");
  if (existing_sessions != NULL && yyjson_arr_iter_init(existing_sessions, &existing_iter)) {
    while ((item = yyjson_arr_iter_next(&existing_iter)) != NULL) {
      long existing_id;
      if (!yyjson_is_obj(item)) continue;
      existing_id = native_json_obj_get_long_default(item, "id", 0, NULL);
      if (existing_id >= session_id) session_id = existing_id + 1;
    }
  }
  if (sessions == NULL || !yyjson_mut_is_arr(sessions)) {
    sessions = yyjson_mut_arr(mut_doc);
    if (sessions == NULL || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "sessions"), sessions)) {
      free(session_token_hash);
      free(session_token);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      return 69;
    }
  }
  session_obj = yyjson_mut_obj(mut_doc);
  if (session_obj == NULL
      || !yyjson_mut_obj_add_int(mut_doc, session_obj, "id", session_id)
      || !yyjson_mut_obj_add_int(mut_doc, session_obj, "user_id", user_id)
      || !yyjson_mut_obj_add_strcpy(mut_doc, session_obj, "session_token_hash", session_token_hash)
      || !yyjson_mut_obj_add_strcpy(mut_doc, session_obj, "session_kind", "browser_session")
      || !yyjson_mut_obj_put(session_obj, yyjson_mut_strcpy(mut_doc, "current_tenant_id"), yyjson_mut_null(mut_doc))
      || !yyjson_mut_obj_add_strcpy(mut_doc, session_obj, "expires_at", expires_at)
      || !yyjson_mut_obj_put(session_obj, yyjson_mut_strcpy(mut_doc, "revoked_at"), yyjson_mut_null(mut_doc))
      || !yyjson_mut_obj_add_strcpy(mut_doc, session_obj, "created_at", created_at)
      || !yyjson_mut_obj_put(session_obj, yyjson_mut_strcpy(mut_doc, "user_agent"), yyjson_mut_null(mut_doc))
      || !yyjson_mut_obj_put(session_obj, yyjson_mut_strcpy(mut_doc, "ip_address"), yyjson_mut_null(mut_doc))
      || !yyjson_mut_arr_append(sessions, session_obj)) {
    free(session_token_hash);
    free(session_token);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return 69;
  }
  text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
  if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
    free(text);
    free(session_token_hash);
    free(session_token);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return 69;
  }
  free(text);
  free(session_token_hash);
  if (session_cookie_header_out != NULL) {
    *session_cookie_header_out = session_cookie_header_dup_runtime(app, request, session_token, 0);
  }
  if (session_token_out != NULL) {
    *session_token_out = session_token;
  } else {
    free(session_token);
  }
  native_json_doc_free(doc);
  yyjson_mut_doc_free(mut_doc);
  return 0;
}
 
/**
 * @brief Injects CSRF hidden inputs into form tags in an HTML string.
 *
 * Scans @p html for <form ... method="post" ...> tags and inserts
 * a hidden input field carrying the CSRF token after the opening tag.
 *
 * @param html         Original HTML string.
 * @param csrf_token   CSRF token value to inject.
 * @return Newly allocated modified HTML string, or NULL on failure.
 *         Caller must free.  If injection is not needed, returns a
 *         strdup of the original html.
 */
static char *csrf_inject_hidden_inputs(const char *html, const char *csrf_token) {
  const char *scan;
  char *result;
  size_t result_cap;
  size_t result_len;
  char input_tag[256];
  int input_len;
 
  if (html == NULL || csrf_token == NULL) {
    return html != NULL ? strdup(html) : NULL;
  }
 
  input_len = snprintf(input_tag, sizeof(input_tag),
    "<input type=\"hidden\" name=\"csrf_token\" value=\"%s\" />",
    csrf_token);
  if (input_len < 0 || (size_t)input_len >= sizeof(input_tag)) {
    return strdup(html);
  }
 
  result_cap = strlen(html) + (size_t)input_len + 64;
  result = (char *)malloc(result_cap);
  if (result == NULL) {
    return strdup(html);
  }
  result_len = 0;
  scan = html;
 
  while (*scan != '\0') {
    const char *form_start = NULL;
    const char *form_open_end = NULL;
    const char *lower_check;
    size_t tag_len;
 
    while (*scan != '\0' && *scan != '<') {
      if (result_len + 2 > result_cap) {
        size_t new_cap = result_cap * 2;
        char *grown = (char *)realloc(result, new_cap);
        if (grown == NULL) {
          free(result);
          return strdup(html);
        }
        result = grown;
        result_cap = new_cap;
      }
      result[result_len++] = *scan++;
    }
    if (*scan == '\0') {
      break;
    }
 
    form_start = scan;
    lower_check = scan + 1;
    while (*lower_check == ' ') {
      lower_check++;
    }
    if ((lower_check[0] == 'f' || lower_check[0] == 'F') &&
        (lower_check[1] == 'o' || lower_check[1] == 'O') &&
        (lower_check[2] == 'r' || lower_check[2] == 'R') &&
        (lower_check[3] == 'm' || lower_check[3] == 'M') &&
        (lower_check[4] == ' ' || lower_check[4] == '>' || lower_check[4] == '\t' || lower_check[4] == '\n')) {
      int is_post_form = 0;
      form_open_end = lower_check + 4;
      while (*form_open_end != '\0' && *form_open_end != '>') {
        form_open_end++;
      }
      if (*form_open_end == '>') {
        const char *method_attr = lower_check + 4;
        while ((method_attr = strstr(method_attr, "method")) != NULL && method_attr < form_open_end) {
          const char *equals = method_attr + 6;
          while (equals < form_open_end && (*equals == ' ' || *equals == '\t' || *equals == '\n')) {
            equals++;
          }
          if (equals < form_open_end && *equals == '=') {
            const char *value = equals + 1;
            while (value < form_open_end && (*value == ' ' || *value == '\t' || *value == '\n')) {
              value++;
            }
            if (value < form_open_end) {
              char quote = (*value == '\'' || *value == '"') ? *value++ : '\0';
              if ((form_open_end - value) >= 4) {
                if ((value[0] == 'p' || value[0] == 'P') &&
                    (value[1] == 'o' || value[1] == 'O') &&
                    (value[2] == 's' || value[2] == 'S') &&
                    (value[3] == 't' || value[3] == 'T') &&
                    (quote == '\0' || value[4] == quote || value[4] == ' ' || value[4] == '\t' || value[4] == '\n' || value[4] == '>')) {
                  is_post_form = 1;
                  break;
                }
              }
            }
          }
          method_attr += 6;
        }
 
        tag_len = (size_t)(form_open_end - form_start) + 1;
        while (result_len + tag_len + (is_post_form ? (size_t)input_len : 0) + 1 > result_cap) {
          size_t new_cap = result_cap * 2;
          char *grown = (char *)realloc(result, new_cap);
          if (grown == NULL) {
            free(result);
            return strdup(html);
          }
          result = grown;
          result_cap = new_cap;
        }
        memcpy(result + result_len, form_start, tag_len);
        result_len += tag_len;
        if (is_post_form) {
          memcpy(result + result_len, input_tag, (size_t)input_len);
          result_len += (size_t)input_len;
        }
        scan = form_open_end + 1;
        continue;
      }
    }
 
    if (result_len + 2 > result_cap) {
      size_t new_cap = result_cap * 2;
      char *grown = (char *)realloc(result, new_cap);
      if (grown == NULL) {
        free(result);
        return strdup(html);
      }
      result = grown;
      result_cap = new_cap;
    }
    result[result_len++] = *scan++;
  }
  result[result_len] = '\0';
  return result;
}
 
/**
 * @brief Writes an HTML response to a connection, optionally with a CSRF cookie.
 *
 * @param connection  Connection to write to.
 * @param status      HTTP status code.
 * @param status_text HTTP reason phrase.
 * @param html        HTML body content.
 * @param csrf_token  CSRF token to set as cookie, or NULL to skip.
 */
static void write_html_response_with_headers_runtime(
  NativeConnection *connection,
  int status,
  const char *status_text,
  const char *html,
  const char *csrf_token,
  const char *extra_headers
) {
  int body_len;
 
  if (html == NULL) {
    native_send_text_response(connection, 500, "Internal Server Error", "null response body\n");
    return;
  }
  body_len = (int)strlen(html);
  native_connection_printf(
    connection,
    "HTTP/1.1 %d %s\r\n"
    "Content-Type: text/html; charset=utf-8\r\n"
    "Content-Length: %d\r\n"
    "Cache-Control: no-store\r\n"
    "Connection: close\r\n"
    "Set-Cookie: %s=%s; Path=/; HttpOnly; SameSite=Lax; Max-Age=%s\r\n"
    "%s"
    "\r\n%s",
    status,
    status_text,
    body_len,
    CSRF_COOKIE_NAME,
    csrf_token != NULL ? csrf_token : "",
    CSRF_COOKIE_MAX_AGE,
    extra_headers != NULL ? extra_headers : "",
    html
  );
}
 
static void write_html_response(
  NativeConnection *connection,
  int status,
  const char *status_text,
  const char *html,
  const char *csrf_token
) {
  write_html_response_with_headers_runtime(connection, status, status_text, html, csrf_token, NULL);
}
 
static int render_declared_page_response_with_headers_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const char *page_id,
  const char *request_path,
  const char *body_params_json,
  const char *extra_headers
) {
 
  char *page_spec_rel = NULL;
  char *page_spec_path = NULL;
  char *page_spec_text = NULL;
  yyjson_doc *page_spec_doc = NULL;
  yyjson_val *page_spec_root = NULL;
  char *template_file = NULL;
  char *layout_id = NULL;
  char *body_template_path = NULL;
  yyjson_doc *body_params_doc = NULL;
  yyjson_val *body_params_root = NULL;
  char *body_html = NULL;
  char *full_html = NULL;
  char *injected_html = NULL;
  char *title = NULL;
  char *csrf_token = NULL;
  int status = 500;
 
  if (connection == NULL || app == NULL || app->app_root == NULL || page_id == NULL || body_params_json == NULL) {
    return 500;
  }
  page_spec_rel = declared_page_relative_path_dup_runtime(app->app_root, page_id);
  page_spec_path = page_spec_rel != NULL ? join_base_relative_path_dup_runtime(app->app_root, page_spec_rel) : NULL;
  page_spec_text = page_spec_path != NULL ? read_file_text(page_spec_path) : NULL;
  page_spec_root = page_spec_text != NULL ? load_root_from_text_runtime(page_spec_text, &page_spec_doc) : NULL;
  template_file = page_spec_root != NULL ? native_json_obj_get_string_dup(page_spec_root, "template_file") : NULL;
  layout_id = page_spec_root != NULL ? native_json_obj_get_string_dup(page_spec_root, "layout_id") : NULL;
  body_template_path = template_file != NULL ? join_base_relative_path_dup_runtime(app->app_root, template_file) : NULL;
  body_params_root = load_root_from_text_runtime(body_params_json, &body_params_doc);
  if (page_spec_root == NULL || template_file == NULL || layout_id == NULL || body_template_path == NULL || !path_exists(body_template_path) || body_params_root == NULL) {
    goto render_declared_cleanup;
  }
  title = page_title_dup_runtime(page_spec_root, body_params_root);
  body_html = render_file_template_dup_runtime(body_template_path, body_params_root);
  if (body_html == NULL) {
    goto render_declared_cleanup;
  }
  full_html = render_page_html_dup_runtime(
    app->app_root,
    app->base_path,
    layout_id,
    title,
    body_html,
    "en",
    request_path != NULL ? request_path : (request != NULL ? request->target : "/"),
    active_user_id_from_cookie_runtime(app->state_path, request != NULL ? request->cookie : NULL) > 0 ? 1 : 0,
    0
  );
  if (full_html == NULL) {
    goto render_declared_cleanup;
  }
  csrf_token = csrf_token_for_response(request != NULL ? request->cookie : NULL);
  injected_html = csrf_inject_hidden_inputs(full_html, csrf_token != NULL ? csrf_token : "");
  write_html_response_with_headers_runtime(connection, 200, "OK", injected_html != NULL ? injected_html : full_html, csrf_token != NULL ? csrf_token : "", extra_headers);
  status = 200;
 
render_declared_cleanup:
  free(page_spec_rel);
  free(page_spec_path);
  free(page_spec_text);
  native_json_doc_free(page_spec_doc);
  free(template_file);
  free(layout_id);
  free(body_template_path);
  native_json_doc_free(body_params_doc);
  free(body_html);
  free(full_html);
  free(injected_html);
  free(title);
  free(csrf_token);
  return status;
}
 
static int render_declared_page_response_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const char *page_id,
  const char *request_path,
  const char *body_params_json
) {
  return render_declared_page_response_with_headers_runtime(connection, app, request, page_id, request_path, body_params_json, NULL);
}
 
/**
 * @brief Extracts the query portion from a target string.
 *
 * @param target  Raw request target (may contain a @c ? ).
 * @param dest    Destination buffer.
 * @param dest_size  Size of the destination buffer.
 */
static void extract_query(const char *target, char *dest, size_t dest_size) {
  const char *qmark;
 
  dest[0] = '\0';
  if (target == NULL || dest_size == 0) {
    return;
  }
 
  qmark = strchr(target, '?');
  if (qmark != NULL && *(qmark + 1) != '\0') {
    qmark++;
    snprintf(dest, dest_size, "%s", qmark);
  }
}
 
/**
 * @brief Resolves invite-accept page parameters from the current app state.
 *
 * @param app          Active app runtime.
 * @param match        Matched route used to extract path parameters.
 * @param request_path Request path for parameter extraction.
 *
 * @return Newly allocated page-params JSON string, or @c NULL when no
 *         active invite can be resolved.
 */
static char *resolve_invite_accept_page_params_json_runtime(
  const AppRuntime *app,
  const NativeDynamicRouteMatch *match,
  const char *request_path
) {
  char *invite_token = NULL;
  char *token_hash = NULL;
  yyjson_doc *state_doc = NULL;
  yyjson_val *state_root = NULL;
  yyjson_val *invites = NULL;
  yyjson_arr_iter invite_iter;
  yyjson_val *invite_row = NULL;
  char now_iso[21];
  char *body_params_json = NULL;
 
  if (app == NULL || match == NULL || request_path == NULL) {
    return NULL;
  }
  invite_token = native_dynamic_dispatch_extract_param(match->path, request_path, "invite_token");
  token_hash = token_hash_dup_runtime(invite_token != NULL ? invite_token : "");
  state_doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
  state_root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
  invites = state_root != NULL ? state_array_runtime_local(state_root, "invites") : NULL;
  if (invites != NULL && token_hash != NULL && now_iso_utc_runtime(now_iso) && yyjson_arr_iter_init(invites, &invite_iter)) {
    while ((invite_row = yyjson_arr_iter_next(&invite_iter)) != NULL) {
      yyjson_val *hash_value = native_json_obj_get(invite_row, "token_hash");
      yyjson_val *accepted_user_id = native_json_obj_get(invite_row, "accepted_user_id");
      char *expires_at = NULL;
      if (!yyjson_is_obj(invite_row) || !yyjson_is_str(hash_value) || !yyjson_equals_str(hash_value, token_hash)) {
        continue;
      }
      expires_at = native_json_obj_get_string_dup(invite_row, "expires_at");
      if ((accepted_user_id == NULL || yyjson_is_null(accepted_user_id) || native_json_obj_get_long_default(invite_row, "accepted_user_id", 0, NULL) == 0)
          && expires_at != NULL && strcmp(expires_at, now_iso) > 0) {
        char *invite_kind = native_json_obj_get_string_dup(invite_row, "invite_kind");
        char *invite_email = native_json_obj_get_string_dup(invite_row, "email");
        long business_id = 0;
        long tenant_id = native_json_obj_get_long_default(invite_row, "target_tenant_id", 0, NULL);
        char *target_business_name = NULL;
        if (tenant_id > 0) {
          yyjson_val *tenants = state_array_runtime_local(state_root, "tenants");
          yyjson_arr_iter tenant_iter;
          yyjson_val *tenant_row = NULL;
          if (tenants != NULL && yyjson_arr_iter_init(tenants, &tenant_iter)) {
            while ((tenant_row = yyjson_arr_iter_next(&tenant_iter)) != NULL) {
              if (yyjson_is_obj(tenant_row) && native_json_obj_get_long_default(tenant_row, "id", 0, NULL) == tenant_id) {
                business_id = native_json_obj_get_long_default(tenant_row, "source_business_id", 0, NULL);
                break;
              }
            }
          }
        }
        if (business_id > 0) {
          yyjson_val *business = find_business_by_id_runtime_local(state_root, business_id);
          target_business_name = business != NULL ? native_json_obj_get_string_dup(business, "name") : NULL;
        }
        body_params_json = invite_accept_page_params_json_dup_runtime(
          invite_kind != NULL ? invite_kind : "business_invite",
          target_business_name != NULL ? target_business_name : "",
          "",
          invite_email != NULL ? invite_email : "",
          request_path
        );
        free(invite_kind);
        free(invite_email);
        free(target_business_name);
        free(expires_at);
        break;
      }
      free(expires_at);
    }
  }
  free(invite_token);
  free(token_hash);
  native_json_doc_free(state_doc);
  return body_params_json;
}
 
/**
 * @brief Resolves declared page parameter JSON for the matched page route.
 *
 * @param app            Active app runtime.
 * @param request        Active HTTP request.
 * @param match          Matched page route.
 * @param request_path   Request path used for route-param extraction.
 * @param query_string   Raw query string.
 * @param active_user_id Authenticated user id, or @c 0 when anonymous.
 *
 * @return Newly allocated page-params JSON string.
 */
static char *resolve_declared_page_params_json_runtime(
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match,
  const char *request_path,
  const char *query_string,
  long active_user_id
) {
  char *body_params_json = NULL;
 
  if (app == NULL || match == NULL || match->page_id == NULL) {
    return strdup("{\"error_html\":\"\",\"next_input\":\"\"}");
  }
 
  if (streq(match->page_id, "profile") && active_user_id > 0) {
    yyjson_doc *state_doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    yyjson_val *state_root = state_doc != NULL ? yyjson_doc_get_root(state_doc) : NULL;
    yyjson_val *user = state_root != NULL ? find_user_by_id_runtime_local(state_root, active_user_id) : NULL;
    char *selected_payment_preference = user != NULL ? native_json_obj_get_string_dup(user, "payment_preference") : NULL;
    char *payment_preference_options_html = payment_preference_options_html_dup_runtime(selected_payment_preference != NULL ? selected_payment_preference : "pay_on_site");
    body_params_json = profile_render_page_params_json_dup_runtime(
      app->state_path,
      active_user_id,
      app->app_root,
      payment_preference_options_html != NULL ? payment_preference_options_html : ""
    );
    free(selected_payment_preference);
    free(payment_preference_options_html);
    native_json_doc_free(state_doc);
    return body_params_json;
  }
  if (streq(match->page_id, "login")) {
    return login_page_params_json_dup_runtime(query_string, "");
  }
  if (streq(match->page_id, "register")) {
    return register_page_params_json_dup_runtime(query_string);
  }
  if (streq(match->page_id, "password_reset_request")) {
    return password_reset_request_page_params_json_dup_runtime();
  }
  if (streq(match->page_id, "password_reset_complete")) {
    return password_reset_complete_page_params_json_dup_runtime(request_path);
  }
  if (streq(match->page_id, "invite_accept")) {
    return resolve_invite_accept_page_params_json_runtime(app, match, request_path);
  }
  if (streq(match->page_id, "explore")) {
    return explore_render_page_params_json_dup_runtime(app->state_path, app->app_root);
  }
  if (streq(match->page_id, "appointments") && active_user_id > 0) {
    return appointments_render_page_params_json_dup_runtime(app->state_path, active_user_id, app->app_root);
  }
  if (streq(match->page_id, "business_dashboard") && active_user_id > 0) {
    return business_dashboard_render_page_params_json_dup_runtime(app->state_path, active_user_id, app->app_root);
  }
  if (streq(match->page_id, "business_landing")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    body_params_json = business_landing_render_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      active_user_id,
      app->app_root
    );
    free(business_slug);
    return body_params_json;
  }
  if (streq(match->page_id, "business_calendar")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    char *selected_year = native_dynamic_query_value(query_string, "year");
    char *selected_month = native_dynamic_query_value(query_string, "month");
    char *selected_date = native_dynamic_query_value(query_string, "date");
    body_params_json = business_calendar_render_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      app->app_root,
      selected_year,
      selected_month,
      selected_date
    );
    free(business_slug);
    free(selected_year);
    free(selected_month);
    free(selected_date);
    return body_params_json;
  }
  if (streq(match->page_id, "diagnostics")) {
    return diagnostics_render_page_params_json_dup_runtime(app->state_path);
  }
  if (streq(match->page_id, "business_detail_admin")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    body_params_json = business_detail_admin_render_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      app->app_root
    );
    free(business_slug);
    return body_params_json;
  }
  if (streq(match->page_id, "service_book_form")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    char *service_id_text = native_dynamic_dispatch_extract_param(match->path, request_path, "service_id");
    long service_id = service_id_text != NULL ? strtol(service_id_text, NULL, 10) : 0;
    body_params_json = service_book_form_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      service_id,
      app->app_root,
      NULL
    );
    free(business_slug);
    free(service_id_text);
    return body_params_json;
  }
  if (streq(match->page_id, "business_edit")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    body_params_json = business_edit_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : ""
    );
    free(business_slug);
    return body_params_json;
  }
  if (streq(match->page_id, "service_edit")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    char *service_id_text = native_dynamic_dispatch_extract_param(match->path, request_path, "service_id");
    long service_id = service_id_text != NULL ? strtol(service_id_text, NULL, 10) : 0;
    body_params_json = service_edit_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      service_id
    );
    free(business_slug);
    free(service_id_text);
    return body_params_json;
  }
  if (streq(match->page_id, "generated_admin_manage")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    const char *surface_kind = "services";
    if (match->route_id != NULL && streq(match->route_id, "availability_manage")) {
      surface_kind = "availability";
    } else if (match->route_id != NULL && streq(match->route_id, "technician_manage")) {
      surface_kind = "technicians";
    }
    body_params_json = generated_admin_manage_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      surface_kind,
      ""
    );
    free(business_slug);
    return body_params_json;
  }
  if (app->app_id != NULL && streq(app->app_id, "dynamic_app_template") && streq(match->page_id, "home")) {
    return proof_home_page_params_json_dup_runtime(app->state_path);
  }
  if (streq(match->page_id, "business_availability_edit")) {
    char *business_slug = native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug");
    char *availability_id_text = native_dynamic_dispatch_extract_param(match->path, request_path, "availability_id");
    long availability_id = availability_id_text != NULL ? strtol(availability_id_text, NULL, 10) : 0;
    body_params_json = business_availability_edit_page_params_json_dup_runtime(
      app->state_path,
      business_slug != NULL ? business_slug : "",
      availability_id,
      ""
    );
    free(business_slug);
    free(availability_id_text);
    return body_params_json;
  }
 
  (void)request;
  return strdup("{\"error_html\":\"\",\"next_input\":\"\"}");
}
 
/**
 * @brief Handles password-reset request action processing.
 *
 * @param connection Active client connection.
 * @param app        Active app runtime.
 * @param request    Active HTTP request.
 *
 * @return HTTP status code written to the connection.
 */
static int handle_password_reset_request_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request
) {
  char *email = request_form_value_dup_runtime(request, "email");
  char *preview_path = NULL;
  yyjson_doc *doc = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *password_resets = NULL;
  yyjson_val *user = NULL;
  char created_at[21];
  char expires_at[21];
  int write_code = 0;
 
  doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  if (root != NULL && email != NULL && email[0] != '\0' && now_iso_utc_runtime(created_at) && iso_after_seconds_runtime(7200, expires_at)) {
    yyjson_val *users = state_array_runtime_local(root, "users");
    yyjson_arr_iter iter;
    yyjson_val *row = NULL;
    if (users != NULL && yyjson_arr_iter_init(users, &iter)) {
      while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
        char *row_email = native_json_obj_get_string_dup(row, "email");
        int matches = row_email != NULL && streq(row_email, email) && yyjson_get_bool(native_json_obj_get(row, "is_active"));
        free(row_email);
        if (matches) {
          user = row;
          break;
        }
      }
    }
    if (user != NULL) {
      char token[CSRF_TOKEN_HEX_LEN + 1];
      char *token_hash = NULL;
      long user_id = native_json_obj_get_long_default(user, "id", 0, NULL);
      mut_doc = yyjson_doc_mut_copy(doc, NULL);
      mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
      password_resets = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "password_resets") : NULL;
      if (mut_doc != NULL && mut_root != NULL && yyjson_mut_is_obj(mut_root)) {
        if (password_resets == NULL || !yyjson_mut_is_arr(password_resets)) {
          password_resets = yyjson_mut_arr(mut_doc);
          if (password_resets != NULL) {
            yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "password_resets"), password_resets);
          }
        }
      }
      csrf_generate_random_hex(token, 24);
      token_hash = token_hash_dup_runtime(token);
      if (mut_doc != NULL && mut_root != NULL && password_resets != NULL && token_hash != NULL) {
        yyjson_val *source_resets = state_array_runtime_local(root, "password_resets");
        yyjson_mut_val *reset_obj = yyjson_mut_obj(mut_doc);
        long reset_id = next_array_id_runtime_local(source_resets);
        if (reset_obj != NULL
            && yyjson_mut_obj_add_int(mut_doc, reset_obj, "id", reset_id)
            && yyjson_mut_obj_add_int(mut_doc, reset_obj, "user_id", user_id)
            && yyjson_mut_obj_add_strcpy(mut_doc, reset_obj, "token_hash", token_hash)
            && yyjson_mut_obj_add_strcpy(mut_doc, reset_obj, "expires_at", expires_at)
            && yyjson_mut_obj_put(reset_obj, yyjson_mut_strcpy(mut_doc, "claimed_at"), yyjson_mut_null(mut_doc))
            && yyjson_mut_obj_add_strcpy(mut_doc, reset_obj, "created_at", created_at)
            && yyjson_mut_arr_append(password_resets, reset_obj)) {
          char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
          if (text != NULL) {
            write_code = persist_app_state_text_runtime_local(app, text);
            free(text);
          } else {
            write_code = 69;
          }
          if (write_code == 0) {
            size_t needed = strlen("/accounts/password-reset/complete//") + strlen(token) + 1;
            preview_path = (char *)malloc(needed);
            if (preview_path != NULL) {
              snprintf(preview_path, needed, "/accounts/password-reset/complete/%s/", token);
            }
          }
        }
      }
      free(token_hash);
    }
  }
  free(email);
  native_json_doc_free(doc);
  yyjson_mut_doc_free(mut_doc);
  {
    char *body_params_json = password_reset_sent_page_params_json_dup_runtime(preview_path != NULL ? preview_path : "");
    int status = body_params_json != NULL
      ? render_declared_page_response_runtime(connection, app, request, "password_reset_sent", "/accounts/password-reset/", body_params_json)
      : 500;
    free(body_params_json);
    free(preview_path);
    return status;
  }
}
 
/**
 * @brief Handles password-reset completion action processing.
 *
 * @param connection Active client connection.
 * @param app        Active app runtime.
 * @param request    Active HTTP request.
 * @param match      Matched action route.
 *
 * @return HTTP status code written to the connection.
 */
static int handle_password_reset_complete_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
) {
  char *request_path = request_path_dup_runtime(request);
  char *reset_token = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "reset_token") : NULL;
  char *password = request_form_value_dup_runtime(request, "password");
  char *password_confirm = request_form_value_dup_runtime(request, "password_confirm");
  yyjson_doc *doc = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_val *root = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *password_resets = NULL;
  yyjson_mut_val *users = NULL;
  yyjson_mut_val *sessions = NULL;
  yyjson_mut_val *reset_row = NULL;
  yyjson_mut_val *user_row = NULL;
  char now_iso[21];
  char *token_hash = NULL;
  char *password_hash = NULL;
 
  if (reset_token == NULL || reset_token[0] == '\0' || password == NULL || password[0] == '\0'
      || password_confirm == NULL || !streq(password, password_confirm) || strlen(password) < 8) {
    free(request_path);
    free(reset_token);
    free(password);
    free(password_confirm);
    write_json_error(connection, 422, "Unprocessable Entity", "invalid_password_reset", "Invalid password reset submission.");
    return 422;
  }
 
  doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  token_hash = token_hash_dup_runtime(reset_token);
  mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
  mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
  password_resets = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "password_resets") : NULL;
  users = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "users") : NULL;
  sessions = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "sessions") : NULL;
  if (root == NULL || mut_doc == NULL || mut_root == NULL || token_hash == NULL || !now_iso_utc_runtime(now_iso)
      || password_resets == NULL || !yyjson_mut_is_arr(password_resets) || users == NULL || !yyjson_mut_is_arr(users)) {
    free(request_path);
    free(reset_token);
    free(password);
    free(password_confirm);
    free(token_hash);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "password reset state unavailable\n");
    return 500;
  }
 
  {
    yyjson_val *source_resets = state_array_runtime_local(root, "password_resets");
    yyjson_val *source_users = state_array_runtime_local(root, "users");
    yyjson_arr_iter reset_iter;
    yyjson_val *source_reset_row = NULL;
    size_t reset_index = 0;
    size_t found_reset_index = (size_t)-1;
    size_t found_user_index = (size_t)-1;
    long matched_user_id = 0;
    if (source_resets != NULL && yyjson_arr_iter_init(source_resets, &reset_iter)) {
      while ((source_reset_row = yyjson_arr_iter_next(&reset_iter)) != NULL) {
        yyjson_val *hash_value = native_json_obj_get(source_reset_row, "token_hash");
        yyjson_val *claimed_value = native_json_obj_get(source_reset_row, "claimed_at");
        char *expires_at = NULL;
        if (!yyjson_is_obj(source_reset_row) || !yyjson_is_str(hash_value) || !yyjson_equals_str(hash_value, token_hash)) {
          reset_index++;
          continue;
        }
        expires_at = native_json_obj_get_string_dup(source_reset_row, "expires_at");
        if ((claimed_value == NULL || yyjson_is_null(claimed_value) || (yyjson_is_str(claimed_value) && yyjson_get_len(claimed_value) == 0))
            && expires_at != NULL && strcmp(expires_at, now_iso) > 0) {
          found_reset_index = reset_index;
          matched_user_id = native_json_obj_get_long_default(source_reset_row, "user_id", 0, NULL);
          free(expires_at);
          break;
        }
        free(expires_at);
        reset_index++;
      }
    }
    if (source_users != NULL && found_reset_index != (size_t)-1) {
      yyjson_arr_iter user_iter;
      yyjson_val *source_user_row = NULL;
      size_t user_index = 0;
      if (yyjson_arr_iter_init(source_users, &user_iter)) {
        while ((source_user_row = yyjson_arr_iter_next(&user_iter)) != NULL) {
          if (yyjson_is_obj(source_user_row) && native_json_obj_get_long_default(source_user_row, "id", 0, NULL) == matched_user_id) {
            found_user_index = user_index;
            break;
          }
          user_index++;
        }
      }
    }
    if (found_reset_index != (size_t)-1) {
      reset_row = yyjson_mut_arr_get(password_resets, found_reset_index);
    }
    if (found_user_index != (size_t)-1) {
      user_row = yyjson_mut_arr_get(users, found_user_index);
    }
  }
 
  if (reset_row == NULL || user_row == NULL) {
    free(request_path);
    free(reset_token);
    free(password);
    free(password_confirm);
    free(token_hash);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    write_json_error(connection, 404, "Not Found", "password_reset_not_found", "Password reset token not found.");
    return 404;
  }
 
  password_hash = password_hash_dup_runtime(password);
  if (password_hash == NULL
      || !yyjson_mut_obj_put(reset_row, yyjson_mut_strcpy(mut_doc, "claimed_at"), yyjson_mut_strcpy(mut_doc, now_iso))
      || !yyjson_mut_obj_put(user_row, yyjson_mut_strcpy(mut_doc, "password_hash"), yyjson_mut_strcpy(mut_doc, password_hash))) {
    free(request_path);
    free(reset_token);
    free(password);
    free(password_confirm);
    free(token_hash);
    free(password_hash);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "password reset update failed\n");
    return 500;
  }
  if (sessions != NULL) {
    (void)sessions;
  }
  {
    char *render_path = request_path != NULL ? strdup(request_path) : strdup("/accounts/password-reset/");
    char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
    int write_code = text != NULL ? persist_app_state_text_runtime_local(app, text) : 69;
    free(text);
    free(request_path);
    free(reset_token);
    free(password);
    free(password_confirm);
    free(token_hash);
    free(password_hash);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    if (write_code != 0) {
      free(render_path);
      native_send_text_response(connection, 500, "Internal Server Error", "password reset persist failed\n");
      return 500;
    }
    {
      char *body_params_json = strdup("{}");
      int status = body_params_json != NULL && render_path != NULL
        ? render_declared_page_response_runtime(connection, app, request, "password_reset_complete_done", render_path, body_params_json)
        : 500;
      free(body_params_json);
      free(render_path);
      return status;
    }
  }
}
 
/**
 * @brief Handles invite creation for tenant-backed business membership flows.
 *
 * @param connection Active client connection.
 * @param app        Active app runtime.
 * @param request    Active HTTP request.
 * @param match      Matched action route.
 *
 * @return HTTP status code written to the connection.
 */
static int handle_issue_business_invite_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
) {
  long active_user_id = active_user_id_from_cookie_runtime(app->state_path, request->cookie);
  char *request_path = request_path_dup_runtime(request);
  char *business_slug = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug") : NULL;
  char *email = request_form_value_dup_runtime(request, "email");
  char *account_type = request_form_value_dup_runtime(request, "account_type");
  char *role_hint = request_form_value_dup_runtime(request, "role_hint");
  yyjson_doc *doc = NULL;
  yyjson_val *root = NULL;
  yyjson_val *business = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *invites = NULL;
  long business_id = 0;
  long tenant_id = 0;
  char token[CSRF_TOKEN_HEX_LEN + 1];
  char *token_hash = NULL;
  char created_at[21];
  char expires_at[21];
  char *preview_path = NULL;
  char *return_path = NULL;
  char *render_path = NULL;
  char *invite_email_copy = NULL;
  int write_code = 69;
 
  if (active_user_id <= 0 || business_slug == NULL || business_slug[0] == '\0' || email == NULL || email[0] == '\0' || !now_iso_utc_runtime(created_at) || !iso_after_seconds_runtime(604800, expires_at)) {
    free(request_path);
    free(business_slug);
    free(email);
    free(account_type);
    free(role_hint);
    write_json_error(connection, 422, "Unprocessable Entity", "invalid_invite_request", "Invalid invite submission.");
    return 422;
  }
 
  doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
  business_id = business != NULL ? native_json_obj_get_long_default(business, "id", 0, NULL) : 0;
  tenant_id = root != NULL ? state_tenant_id_for_business_runtime_local(root, business_id) : 0;
  if (root == NULL || business == NULL || tenant_id <= 0 || !user_has_active_tenant_membership_runtime_local(root, active_user_id, tenant_id)) {
    free(request_path);
    free(business_slug);
    free(email);
    free(account_type);
    free(role_hint);
    native_json_doc_free(doc);
    write_json_error(connection, 403, "Forbidden", "invite_forbidden", "Invite creation requires business membership.");
    return 403;
  }
 
  mut_doc = yyjson_doc_mut_copy(doc, NULL);
  mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
  invites = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "invites") : NULL;
  if (mut_doc == NULL || mut_root == NULL || !yyjson_mut_is_obj(mut_root)) {
    free(request_path);
    free(business_slug);
    free(email);
    free(account_type);
    free(role_hint);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "invite state unavailable\n");
    return 500;
  }
  if (invites == NULL || !yyjson_mut_is_arr(invites)) {
    invites = yyjson_mut_arr(mut_doc);
    if (invites == NULL || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "invites"), invites)) {
      free(request_path);
      free(business_slug);
      free(email);
      free(account_type);
      free(role_hint);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "invite array unavailable\n");
      return 500;
    }
  }
 
  csrf_generate_random_hex(token, 24);
  token_hash = token_hash_dup_runtime(token);
  if (token_hash != NULL) {
    yyjson_val *source_invites = state_array_runtime_local(root, "invites");
    yyjson_mut_val *invite_obj = yyjson_mut_obj(mut_doc);
    long invite_id = next_array_id_runtime_local(source_invites);
    const char *invite_kind = "business_invite";
    const char *membership_role_id = membership_role_id_for_invite_runtime_local(role_hint, account_type);
    if (invite_obj != NULL
        && yyjson_mut_obj_add_int(mut_doc, invite_obj, "id", invite_id)
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "email", email)
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "account_type", account_type != NULL && account_type[0] != '\0' ? account_type : "business_customer")
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "invite_kind", invite_kind)
        && yyjson_mut_obj_add_int(mut_doc, invite_obj, "target_tenant_id", tenant_id)
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "role_hint", membership_role_id)
        && yyjson_mut_obj_add_int(mut_doc, invite_obj, "invited_by_user_id", active_user_id)
        && yyjson_mut_obj_put(invite_obj, yyjson_mut_strcpy(mut_doc, "accepted_user_id"), yyjson_mut_null(mut_doc))
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "token_hash", token_hash)
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "expires_at", expires_at)
        && yyjson_mut_obj_put(invite_obj, yyjson_mut_strcpy(mut_doc, "claimed_at"), yyjson_mut_null(mut_doc))
        && yyjson_mut_obj_add_strcpy(mut_doc, invite_obj, "created_at", created_at)
        && yyjson_mut_arr_append(invites, invite_obj)) {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text != NULL) {
        write_code = persist_app_state_text_runtime_local(app, text);
      }
      free(text);
      if (write_code == 0) {
        size_t preview_needed = strlen("/accounts/invite//") + strlen(token) + 1;
        size_t return_needed = strlen("/businesses//") + strlen(business_slug) + 1;
        preview_path = (char *)malloc(preview_needed);
        return_path = (char *)malloc(return_needed);
        render_path = request_path != NULL ? strdup(request_path) : strdup("/businesses/");
        invite_email_copy = email != NULL ? strdup(email) : strdup("");
        if (preview_path != NULL) {
          snprintf(preview_path, preview_needed, "/accounts/invite/%s/", token);
        }
        if (return_path != NULL) {
          snprintf(return_path, return_needed, "/businesses/%s/", business_slug);
        }
      }
    }
  }
 
  free(request_path);
  free(business_slug);
  free(email);
  free(account_type);
  free(role_hint);
  free(token_hash);
  native_json_doc_free(doc);
  yyjson_mut_doc_free(mut_doc);
  if (write_code != 0 || preview_path == NULL || return_path == NULL || render_path == NULL || invite_email_copy == NULL) {
    free(preview_path);
    free(return_path);
    free(render_path);
    free(invite_email_copy);
    native_send_text_response(connection, 500, "Internal Server Error", "invite persist failed\n");
    return 500;
  }
  {
    char *body_params_json = invite_created_page_params_json_dup_runtime(invite_email_copy, preview_path, return_path);
    int status = body_params_json != NULL
      ? render_declared_page_response_runtime(connection, app, request, "invite_created", render_path, body_params_json)
      : 500;
    free(body_params_json);
    free(preview_path);
    free(return_path);
    free(render_path);
    free(invite_email_copy);
    return status;
  }
}
 
/**
 * @brief Handles invite acceptance and initial session creation.
 *
 * @param connection Active client connection.
 * @param app        Active app runtime.
 * @param request    Active HTTP request.
 * @param match      Matched action route.
 *
 * @return HTTP status code written to the connection.
 */
static int handle_accept_invite_action_runtime(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
) {
  char *request_path = request_path_dup_runtime(request);
  char *invite_token = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "invite_token") : NULL;
  char *username = request_form_value_dup_runtime(request, "username");
  char *full_name = request_form_value_dup_runtime(request, "full_name");
  char *phone_number = request_form_value_dup_runtime(request, "phone_number");
  char *password = request_form_value_dup_runtime(request, "password");
  char *password_confirm = request_form_value_dup_runtime(request, "password_confirm");
  yyjson_doc *doc = NULL;
  yyjson_val *root = NULL;
  yyjson_mut_doc *mut_doc = NULL;
  yyjson_mut_val *mut_root = NULL;
  yyjson_mut_val *invites = NULL;
  yyjson_mut_val *users = NULL;
  yyjson_mut_val *memberships = NULL;
  yyjson_mut_val *invite_row = NULL;
  char *token_hash = NULL;
  char *password_hash = NULL;
  char created_at[21];
  char *session_cookie_header = NULL;
  char *session_token = NULL;
  long tenant_id = 0;
  long invited_by_user_id = 0;
  long next_user_id = 1;
  long next_membership_id = 1;
  const char *membership_role_id = "business_customer";
  const char *account_type_value = "business_customer";
  const char *invite_email_value = "";
  const char *continue_path = "/explore/";
  size_t invite_index = (size_t)-1;
 
  if (invite_token == NULL || invite_token[0] == '\0' || username == NULL || username[0] == '\0'
      || full_name == NULL || full_name[0] == '\0' || password == NULL || password[0] == '\0'
      || password_confirm == NULL || !streq(password, password_confirm) || strlen(password) < 8 || !now_iso_utc_runtime(created_at)) {
    free(request_path);
    free(invite_token);
    free(username);
    free(full_name);
    free(phone_number);
    free(password);
    free(password_confirm);
    write_json_error(connection, 422, "Unprocessable Entity", "invalid_invite_accept", "Invalid invite acceptance submission.");
    return 422;
  }
 
  doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
  root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
  token_hash = token_hash_dup_runtime(invite_token);
  {
    int username_taken = root != NULL && find_user_by_username_runtime_local(root, username) != NULL;
    if (root == NULL || token_hash == NULL || username_taken) {
      free(request_path);
      free(invite_token);
      free(username);
      free(full_name);
      free(phone_number);
      free(password);
      free(password_confirm);
      free(token_hash);
      native_json_doc_free(doc);
      if (username_taken) {
        write_json_error(connection, 422, "Unprocessable Entity", "username_taken", "Username already exists.");
        return 422;
      }
      write_json_error(connection, 404, "Not Found", "invite_not_found", "Invite token not found.");
      return 404;
    }
  }
 
  {
    yyjson_val *source_invites = state_array_runtime_local(root, "invites");
    yyjson_val *source_users = state_array_runtime_local(root, "users");
    yyjson_val *source_memberships = state_array_runtime_local(root, "tenant_memberships");
    yyjson_arr_iter iter;
    yyjson_val *row = NULL;
    char now_iso[21];
    size_t scan_index = 0;
    now_iso_utc_runtime(now_iso);
    next_user_id = next_array_id_runtime_local(source_users);
    next_membership_id = next_array_id_runtime_local(source_memberships);
    if (source_invites != NULL && yyjson_arr_iter_init(source_invites, &iter)) {
      while ((row = yyjson_arr_iter_next(&iter)) != NULL) {
        yyjson_val *hash_value = native_json_obj_get(row, "token_hash");
        yyjson_val *accepted_user_value = native_json_obj_get(row, "accepted_user_id");
        char *expires_at = NULL;
        if (!yyjson_is_obj(row) || !yyjson_is_str(hash_value) || !yyjson_equals_str(hash_value, token_hash)) {
          scan_index++;
          continue;
        }
        expires_at = native_json_obj_get_string_dup(row, "expires_at");
        if ((accepted_user_value == NULL || yyjson_is_null(accepted_user_value) || native_json_obj_get_long_default(row, "accepted_user_id", 0, NULL) == 0)
            && expires_at != NULL && strcmp(expires_at, now_iso) > 0) {
          invite_index = scan_index;
          tenant_id = native_json_obj_get_long_default(row, "target_tenant_id", 0, NULL);
          invited_by_user_id = native_json_obj_get_long_default(row, "invited_by_user_id", 0, NULL);
          membership_role_id = membership_role_id_for_invite_runtime_local(yyjson_get_str(native_json_obj_get(row, "role_hint")), yyjson_get_str(native_json_obj_get(row, "account_type")));
          account_type_value = yyjson_get_str(native_json_obj_get(row, "account_type"));
          invite_email_value = yyjson_get_str(native_json_obj_get(row, "email"));
          free(expires_at);
          break;
        }
        free(expires_at);
        scan_index++;
      }
    }
  }
 
  if (invite_index == (size_t)-1) {
    free(request_path);
    free(invite_token);
    free(username);
    free(full_name);
    free(phone_number);
    free(password);
    free(password_confirm);
    free(token_hash);
    native_json_doc_free(doc);
    write_json_error(connection, 404, "Not Found", "invite_not_found", "Invite token not found.");
    return 404;
  }
 
  password_hash = password_hash_dup_runtime(password);
  mut_doc = yyjson_doc_mut_copy(doc, NULL);
  mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
  invites = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "invites") : NULL;
  users = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "users") : NULL;
  memberships = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "tenant_memberships") : NULL;
  if (password_hash == NULL || mut_doc == NULL || mut_root == NULL || invites == NULL || !yyjson_mut_is_arr(invites) || users == NULL || !yyjson_mut_is_arr(users)) {
    free(request_path);
    free(invite_token);
    free(username);
    free(full_name);
    free(phone_number);
    free(password);
    free(password_confirm);
    free(token_hash);
    free(password_hash);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "invite accept state unavailable\n");
    return 500;
  }
  if (memberships == NULL || !yyjson_mut_is_arr(memberships)) {
    memberships = yyjson_mut_arr(mut_doc);
    if (memberships == NULL || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "tenant_memberships"), memberships)) {
      free(request_path);
      free(invite_token);
      free(username);
      free(full_name);
      free(phone_number);
      free(password);
      free(password_confirm);
      free(token_hash);
      free(password_hash);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "membership array unavailable\n");
      return 500;
    }
  }
 
  invite_row = yyjson_mut_arr_get(invites, invite_index);
  if (invite_row == NULL) {
    free(request_path);
    free(invite_token);
    free(username);
    free(full_name);
    free(phone_number);
    free(password);
    free(password_confirm);
    free(token_hash);
    free(password_hash);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "invite row unavailable\n");
    return 500;
  }
  {
    yyjson_mut_val *user_obj = yyjson_mut_obj(mut_doc);
    yyjson_mut_val *membership_obj = yyjson_mut_obj(mut_doc);
    int ok = user_obj != NULL
      && yyjson_mut_obj_add_int(mut_doc, user_obj, "id", next_user_id)
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "username", username)
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "email", invite_email_value != NULL ? invite_email_value : "")
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "password_hash", password_hash)
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "display_name", full_name)
      && yyjson_mut_obj_add_bool(mut_doc, user_obj, "is_active", 1)
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "account_type", account_type_value != NULL && account_type_value[0] != '\0' ? account_type_value : "business_customer")
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "full_name", full_name)
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "phone_number", phone_number != NULL ? phone_number : "")
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "address", "")
      && yyjson_mut_obj_add_strcpy(mut_doc, user_obj, "payment_preference", "pay_on_site")
      && yyjson_mut_obj_add_bool(mut_doc, user_obj, "email_verified", 1)
      && yyjson_mut_arr_append(users, user_obj)
      && yyjson_mut_obj_put(invite_row, yyjson_mut_strcpy(mut_doc, "accepted_user_id"), yyjson_mut_int(mut_doc, next_user_id))
      && yyjson_mut_obj_put(invite_row, yyjson_mut_strcpy(mut_doc, "claimed_at"), yyjson_mut_strcpy(mut_doc, created_at));
    if (ok && tenant_id > 0) {
      ok = membership_obj != NULL
        && yyjson_mut_obj_add_int(mut_doc, membership_obj, "id", next_membership_id)
        && yyjson_mut_obj_add_int(mut_doc, membership_obj, "tenant_id", tenant_id)
        && yyjson_mut_obj_add_int(mut_doc, membership_obj, "user_id", next_user_id)
        && yyjson_mut_obj_add_strcpy(mut_doc, membership_obj, "role_id", membership_role_id)
        && yyjson_mut_obj_add_strcpy(mut_doc, membership_obj, "membership_status", "active")
        && yyjson_mut_obj_add_int(mut_doc, membership_obj, "invited_by_user_id", invited_by_user_id)
        && yyjson_mut_obj_add_strcpy(mut_doc, membership_obj, "created_at", created_at)
        && yyjson_mut_obj_add_strcpy(mut_doc, membership_obj, "revoked_at", "")
        && yyjson_mut_arr_append(memberships, membership_obj);
    }
    if (!ok) {
      free(request_path);
      free(invite_token);
      free(username);
      free(full_name);
      free(phone_number);
      free(password);
      free(password_confirm);
      free(token_hash);
      free(password_hash);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "invite accept update failed\n");
      return 500;
    }
  }
 
  {
    char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
    int write_code = text != NULL ? persist_app_state_text_runtime_local(app, text) : 69;
    free(text);
    if (write_code != 0) {
      free(request_path);
      free(invite_token);
      free(username);
      free(full_name);
      free(phone_number);
      free(password);
      free(password_confirm);
      free(token_hash);
      free(password_hash);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "invite accept persist failed\n");
      return 500;
    }
  }
 
  {
    yyjson_val *user_after = NULL;
    yyjson_val *root_after = NULL;
    yyjson_doc *doc_after = native_json_doc_load_file(app->state_path);
    root_after = doc_after != NULL ? yyjson_doc_get_root(doc_after) : NULL;
    user_after = root_after != NULL ? find_user_by_id_runtime_local(root_after, next_user_id) : NULL;
    if (tenant_id > 0) {
      yyjson_val *tenants = root_after != NULL ? state_array_runtime_local(root_after, "tenants") : NULL;
      yyjson_arr_iter tenant_iter;
      yyjson_val *tenant_row = NULL;
      long business_id = 0;
      if (tenants != NULL && yyjson_arr_iter_init(tenants, &tenant_iter)) {
        while ((tenant_row = yyjson_arr_iter_next(&tenant_iter)) != NULL) {
          if (yyjson_is_obj(tenant_row) && native_json_obj_get_long_default(tenant_row, "id", 0, NULL) == tenant_id) {
            business_id = native_json_obj_get_long_default(tenant_row, "source_business_id", 0, NULL);
            break;
          }
        }
      }
      if (business_id > 0) {
        yyjson_val *business = find_business_by_id_runtime_local(root_after, business_id);
        const char *business_slug_value = business != NULL ? yyjson_get_str(native_json_obj_get(business, "slug")) : NULL;
        if (business_slug_value != NULL && business_slug_value[0] != '\0') {
          static char continue_buffer[256];
          snprintf(continue_buffer, sizeof(continue_buffer), "/b/%s/", business_slug_value);
          continue_path = continue_buffer;
        }
      }
    } else if (user_after != NULL) {
      continue_path = default_signed_in_path_runtime(user_after);
    }
    native_json_doc_free(doc_after);
  }
 
  if (issue_browser_session_runtime(app, request, next_user_id, &session_token, &session_cookie_header) != 0 || session_cookie_header == NULL) {
    free(request_path);
    free(invite_token);
    free(username);
    free(full_name);
    free(phone_number);
    free(password);
    free(password_confirm);
    free(token_hash);
    free(password_hash);
    free(session_token);
    free(session_cookie_header);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_send_text_response(connection, 500, "Internal Server Error", "invite session issuance failed\n");
    return 500;
  }
 
  {
    size_t header_needed = strlen(session_cookie_header) + 3;
    char *extra_headers = (char *)malloc(header_needed);
    char *body_params_json = invite_accept_done_page_params_json_dup_runtime(continue_path);
    int status = 500;
    if (extra_headers != NULL) {
      snprintf(extra_headers, header_needed, "%s\r\n", session_cookie_header);
    }
    if (body_params_json != NULL && extra_headers != NULL) {
      status = render_declared_page_response_with_headers_runtime(connection, app, request, "invite_accept_done", request_path != NULL ? request_path : "/accounts/invite/", body_params_json, extra_headers);
    }
    free(extra_headers);
    free(body_params_json);
    free(request_path);
    free(invite_token);
    free(username);
    free(full_name);
    free(phone_number);
    free(password);
    free(password_confirm);
    free(token_hash);
    free(password_hash);
    free(session_token);
    free(session_cookie_header);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return status;
  }
}
 
/**
 * @brief Serves the Pharos dynamic-app home page or a generic landing page.
 *
 * This is a placeholder that will be replaced by full template
 * rendering in later Phase 3 slices.  For now it provides a
 * functional HTML page so the app is browsable.
 */
static void serve_dynamic_home_page(
  NativeConnection *connection,
  const char *app_id,
  const char *route_id,
  const char *csrf_token
) {
  char html[2048];
  int len;
 
  len = snprintf(html, sizeof(html),
    "<!doctype html>\n"
    "<html lang=\"en\">\n"
    "<head>\n"
    "  <meta charset=\"utf-8\">\n"
    "  <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n"
    "  <title>%s</title>\n"
    "</head>\n"
    "<body>\n"
    "  <main>\n"
    "    <h1>%s</h1>\n"
    "    <p>Served by the Pharos native in-process dynamic runtime.</p>\n"
    "    <p>Route: <code>%s</code></p>\n"
    "  </main>\n"
    "</body>\n"
    "</html>\n",
    app_id != NULL ? app_id : "Pharos App",
    app_id != NULL ? app_id : "Pharos App",
    route_id != NULL ? route_id : "/"
  );
 
  if (len < 0 || (size_t)len >= sizeof(html)) {
    native_send_text_response(connection, 500, "Internal Server Error", "rendering error\n");
    return;
  }
  write_html_response(connection, 200, "OK", html, csrf_token);
}
 
/**
 * @brief Handles a matched page route using dynamic template rendering.
 *
 * Primary path: resolve the page spec from page_id, render the body
 * template, wrap in the layout template, inject CSRF, and send with
 * the CSRF cookie.
 *
 * Fallback: serve a static file from the artifact directory, or
 * generate a generic landing page.
 */
static int handle_page_route(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match,
  const char *request_path,
  const char *query_string,
  const char *csrf_token
) {
  char *page_spec_rel = NULL;
  char *page_spec_path = NULL;
  char *page_spec_text = NULL;
  yyjson_doc *page_spec_doc = NULL;
  yyjson_val *page_spec_root = NULL;
  char *template_file = NULL;
  char *title = NULL;
  char *layout_id = NULL;
  char *body_template_path = NULL;
  yyjson_doc *body_params_doc = NULL;
  yyjson_val *body_params_root = NULL;
  char *body_params_json = NULL;
  char *body_html = NULL;
  char *full_html = NULL;
  char *injected_html = NULL;
  int status = 500;
 
  if (app == NULL || connection == NULL || match == NULL) {
    if (connection != NULL) {
      native_send_text_response(connection, 500, "Internal Server Error", "null page route params\n");
    }
    return 500;
  }
 
  long active_user_id = active_user_id_from_cookie_runtime(app->state_path, request != NULL ? request->cookie : NULL);
 
  if (match->auth_gate != NULL && streq(match->auth_gate, "session_required") && active_user_id <= 0) {
    const char *base_path = app->base_path != NULL ? app->base_path : "";
    native_connection_printf(
      connection,
      "HTTP/1.1 302 Found\r\n"
      "Location: %s/accounts/login/\r\n"
      "Content-Length: 0\r\n"
      "Cache-Control: no-store\r\n"
      "Connection: close\r\n"
      "\r\n",
      base_path
    );
    return 302;
  }
 
  if (app->app_id != NULL && streq(app->app_id, "dynamic_app_template") && match->page_id != NULL && streq(match->page_id, "state_api")) {
    return write_proof_state_api_response(connection, app->state_path);
  }
 
  /* ---- Primary path: dynamic template rendering ---- */
  if (app->app_root != NULL && match->page_id != NULL) {
    page_spec_rel = declared_page_relative_path_dup_runtime(app->app_root, match->page_id);
    if (page_spec_rel != NULL) {
      page_spec_path = join_base_relative_path_dup_runtime(app->app_root, page_spec_rel);
      if (page_spec_path != NULL && path_exists(page_spec_path)) {
        page_spec_text = read_file_text(page_spec_path);
        if (page_spec_text != NULL) {
          page_spec_root = load_root_from_text_runtime(page_spec_text, &page_spec_doc);
          if (page_spec_root != NULL) {
            template_file = native_json_obj_get_string_dup(page_spec_root, "template_file");
            title = native_json_obj_get_string_dup(page_spec_root, "title");
            layout_id = native_json_obj_get_string_dup(page_spec_root, "layout_id");
          }
        }
      }
    }
 
    if (template_file != NULL && layout_id != NULL) {
      body_template_path = join_base_relative_path_dup_runtime(app->app_root, template_file);
      if (body_template_path != NULL && path_exists(body_template_path)) {
        body_params_json = resolve_declared_page_params_json_runtime(
          app,
          request,
          match,
          request_path,
          query_string,
          active_user_id
        );
        body_params_root = load_root_from_text_runtime(
          body_params_json != NULL ? body_params_json : "{\"error_html\":\"\",\"next_input\":\"\"}",
          &body_params_doc);
        if (body_params_root != NULL) {
          free(title);
          title = page_title_dup_runtime(page_spec_root, body_params_root);
          body_html = render_file_template_dup_runtime(body_template_path, body_params_root);
        }
      }
    }
 
    if (body_html != NULL) {
      full_html = render_page_html_dup_runtime(
        app->app_root,
        app->base_path,
        layout_id,
        title,
        body_html,
        "en",
        request != NULL ? request->target : "/",
        active_user_id > 0 ? 1 : 0,
        0
      );
 
      if (full_html != NULL) {
        injected_html = csrf_inject_hidden_inputs(full_html, csrf_token);
        write_html_response(connection, 200, "OK",
          injected_html != NULL ? injected_html : full_html,
          csrf_token);
        status = 200;
      }
    }
  }
 
  /* Cleanup */
  native_json_doc_free(body_params_doc);
  native_json_doc_free(page_spec_doc);
  free(body_params_json);
  free(body_html);
  free(full_html);
  free(injected_html);
  free(template_file);
  free(title);
  free(layout_id);
  free(body_template_path);
  free(page_spec_text);
  free(page_spec_path);
  free(page_spec_rel);
 
  /* If dynamic rendering succeeded, we are done */
  if (status == 200) {
    return status;
  }
 
  /* ---- Fallback: static file serving ---- */
  if (app->artifact_dir != NULL && match->page_id != NULL) {
    char *page_file = path_join(app->artifact_dir, match->page_id);
    if (page_file != NULL) {
      char *html_file = NULL;
      size_t page_file_len = strlen(page_file);
 
      if (page_file_len > 5 && strcmp(page_file + page_file_len - 5, ".html") == 0) {
        html_file = strdup(page_file);
      } else {
        html_file = (char *)malloc(page_file_len + 6);
        if (html_file != NULL) {
          snprintf(html_file, page_file_len + 6, "%s.html", page_file);
        }
      }
 
      if (html_file != NULL && path_exists(html_file)) {
        status = native_dynamic_media_serve_asset(connection, app->artifact_dir, match->page_id, request);
        free(html_file);
        free(page_file);
        return status;
      }
      free(html_file);
      free(page_file);
    }
  }
 
  /* ---- Final fallback: generic landing page ---- */
  serve_dynamic_home_page(connection, app->app_id, match->route_id, csrf_token);
  return 200;
}
 
/**
 * @brief Handles a matched action route.
 *
 * For now, POST actions return a JSON acknowledgement.  Full action
 * processing will be added in later slices.
 */
static int handle_action_route(
  NativeConnection *connection,
  const AppRuntime *app,
  const HttpRequest *request,
  const NativeDynamicRouteMatch *match
) {
  if (connection == NULL || app == NULL || request == NULL || match == NULL) {
    if (connection != NULL) {
      native_send_text_response(connection, 500, "Internal Server Error", "null action route params\n");
    }
    return 500;
  }
 
  if (!streq(request->method != NULL ? request->method : "", "POST")) {
    write_json_error(connection, 405, "Method Not Allowed", "action_requires_post", "Action routes require POST.");
    return 405;
  }
 
  {
    char *csrf_form_body = request_body_text_dup_runtime(request);
    int csrf_valid = csrf_request_valid_runtime(request, csrf_form_body != NULL ? csrf_form_body : "");
    free(csrf_form_body);
    if (!csrf_valid) {
      native_send_text_response(connection, 403, "Forbidden", "Security verification failed\n");
      return 403;
    }
  }
 
 
  if (app->app_id != NULL && streq(app->app_id, "dynamic_app_template") && match->action_id != NULL && streq(match->action_id, "create_task")) {
    char *form_body = request_body_text_dup_runtime(request);
    char *title = native_dynamic_form_value(form_body != NULL ? form_body : "", "title");
    yyjson_doc *state_doc = NULL;
    yyjson_val *state_root = proof_state_root_load_runtime(app->state_path, &state_doc);
    yyjson_val *items = state_root != NULL ? native_json_obj_get(state_root, "items") : NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_mut_val *mut_items = NULL;
    yyjson_arr_iter iter;
    yyjson_val *item = NULL;
    long next_id = state_root != NULL ? native_json_obj_get_long_default(state_root, "next_id", 1, NULL) : 1;
    int status = 500;
 
    if (title == NULL || title[0] == '\0') {
      free(form_body);
      free(title);
      native_json_doc_free(state_doc);
      native_send_text_response(connection, 422, "Unprocessable Entity", "missing title\n");
      return 422;
    }
    if (state_root == NULL || items == NULL || !yyjson_is_arr(items)) {
      free(form_body);
      free(title);
      native_json_doc_free(state_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "proof state unavailable\n");
      return 500;
    }
    mut_doc = yyjson_mut_doc_new(NULL);
    mut_root = mut_doc != NULL ? yyjson_mut_obj(mut_doc) : NULL;
    mut_items = mut_doc != NULL ? yyjson_mut_arr(mut_doc) : NULL;
    if (mut_doc == NULL || mut_root == NULL || mut_items == NULL
        || !yyjson_mut_obj_add_strcpy(mut_doc, mut_root, "schema", "pharos.dynamic_app_state.v1")
        || !yyjson_mut_obj_add_int(mut_doc, mut_root, "next_id", next_id + 1)
        || !yyjson_mut_obj_add_strcpy(mut_doc, mut_root, "last_action", "task_created")
        || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "items"), mut_items)) {
      free(form_body);
      free(title);
      native_json_doc_free(state_doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "task create failed\n");
      return 500;
    }
    yyjson_mut_doc_set_root(mut_doc, mut_root);
    if (yyjson_arr_iter_init(items, &iter)) {
      while ((item = yyjson_arr_iter_next(&iter)) != NULL) {
        yyjson_mut_val *copied = yyjson_val_mut_copy(mut_doc, item);
        if (copied == NULL || !yyjson_mut_arr_append(mut_items, copied)) {
          free(form_body);
          free(title);
          native_json_doc_free(state_doc);
          yyjson_mut_doc_free(mut_doc);
          native_send_text_response(connection, 500, "Internal Server Error", "task copy failed\n");
          return 500;
        }
      }
    }
    {
      yyjson_mut_val *task = yyjson_mut_obj(mut_doc);
      if (task == NULL
          || !yyjson_mut_obj_add_int(mut_doc, task, "id", next_id)
          || !yyjson_mut_obj_add_bool(mut_doc, task, "done", 0)
          || !yyjson_mut_obj_add_strcpy(mut_doc, task, "title", title)
          || !yyjson_mut_arr_append(mut_items, task)) {
        free(form_body);
        free(title);
        native_json_doc_free(state_doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "task append failed\n");
        return 500;
      }
    }
    {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
        free(text);
        free(form_body);
        free(title);
        native_json_doc_free(state_doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "task persist failed\n");
        return 500;
      }
      free(text);
    }
    free(form_body);
    free(title);
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(mut_doc);
    native_connection_printf(
      connection,
      "HTTP/1.1 303 See Other\r\n"
      "Location: %s/\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : ""
    );
    return 303;
  }
 
  if (app->app_id != NULL && streq(app->app_id, "dynamic_app_template") && match->action_id != NULL && streq(match->action_id, "toggle_task")) {
    char *form_body = request_body_text_dup_runtime(request);
    char *task_id_text = native_dynamic_form_value(form_body != NULL ? form_body : "", "id");
    long task_id = task_id_text != NULL ? strtol(task_id_text, NULL, 10) : 0;
    yyjson_doc *state_doc = NULL;
    yyjson_val *state_root = proof_state_root_load_runtime(app->state_path, &state_doc);
    yyjson_val *items = state_root != NULL ? native_json_obj_get(state_root, "items") : NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_mut_val *mut_items = NULL;
    yyjson_arr_iter iter;
    yyjson_val *item = NULL;
    long next_id = state_root != NULL ? native_json_obj_get_long_default(state_root, "next_id", 1, NULL) : 1;
    int found = 0;
 
    if (task_id <= 0) {
      free(form_body);
      free(task_id_text);
      native_json_doc_free(state_doc);
      native_send_text_response(connection, 422, "Unprocessable Entity", "missing id\n");
      return 422;
    }
    if (state_root == NULL || items == NULL || !yyjson_is_arr(items)) {
      free(form_body);
      free(task_id_text);
      native_json_doc_free(state_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "proof state unavailable\n");
      return 500;
    }
    mut_doc = yyjson_mut_doc_new(NULL);
    mut_root = mut_doc != NULL ? yyjson_mut_obj(mut_doc) : NULL;
    mut_items = mut_doc != NULL ? yyjson_mut_arr(mut_doc) : NULL;
    if (mut_doc == NULL || mut_root == NULL || mut_items == NULL
        || !yyjson_mut_obj_add_strcpy(mut_doc, mut_root, "schema", "pharos.dynamic_app_state.v1")
        || !yyjson_mut_obj_add_int(mut_doc, mut_root, "next_id", next_id)
        || !yyjson_mut_obj_add_strcpy(mut_doc, mut_root, "last_action", "task_toggled")
        || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "items"), mut_items)) {
      free(form_body);
      free(task_id_text);
      native_json_doc_free(state_doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "task toggle failed\n");
      return 500;
    }
    yyjson_mut_doc_set_root(mut_doc, mut_root);
    if (yyjson_arr_iter_init(items, &iter)) {
      while ((item = yyjson_arr_iter_next(&iter)) != NULL) {
        long row_id = native_json_obj_get_long_default(item, "id", 0, NULL);
        int done = yyjson_get_bool(native_json_obj_get(item, "done"));
        char *title = native_json_obj_get_string_dup(item, "title");
        yyjson_mut_val *task = yyjson_mut_obj(mut_doc);
        int append_ok = 0;
        if (task != NULL
            && yyjson_mut_obj_add_int(mut_doc, task, "id", row_id)
            && yyjson_mut_obj_add_bool(mut_doc, task, "done", row_id == task_id ? !done : done)
            && yyjson_mut_obj_add_strcpy(mut_doc, task, "title", title != NULL ? title : "")) {
          append_ok = yyjson_mut_arr_append(mut_items, task);
        }
        if (row_id == task_id) {
          found = 1;
        }
        free(title);
        if (!append_ok) {
          free(form_body);
          free(task_id_text);
          native_json_doc_free(state_doc);
          yyjson_mut_doc_free(mut_doc);
          native_send_text_response(connection, 500, "Internal Server Error", "task rebuild failed\n");
          return 500;
        }
      }
    }
    if (!found) {
      free(form_body);
      free(task_id_text);
      native_json_doc_free(state_doc);
      yyjson_mut_doc_free(mut_doc);
      write_json_error(connection, 404, "Not Found", "task_not_found", "Task not found.");
      return 404;
    }
    {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
        free(text);
        free(form_body);
        free(task_id_text);
        native_json_doc_free(state_doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "task persist failed\n");
        return 500;
      }
      free(text);
    }
    free(form_body);
    free(task_id_text);
    native_json_doc_free(state_doc);
    yyjson_mut_doc_free(mut_doc);
    native_connection_printf(
      connection,
      "HTTP/1.1 303 See Other\r\n"
      "Location: %s/\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : ""
    );
    return 303;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "password_reset_request")) {
    return handle_password_reset_request_action_runtime(connection, app, request);
  }
 
  if (match->action_id != NULL && streq(match->action_id, "password_reset_complete")) {
    return handle_password_reset_complete_action_runtime(connection, app, request, match);
  }
 
  if (match->action_id != NULL && streq(match->action_id, "issue_business_invite")) {
    return handle_issue_business_invite_action_runtime(connection, app, request, match);
  }
 
  if (match->action_id != NULL && streq(match->action_id, "accept_invite")) {
    return handle_accept_invite_action_runtime(connection, app, request, match);
  }
 
  if (match->action_id != NULL && streq(match->action_id, "login")) {
    char *form_body = request_body_text_dup_runtime(request);
    char *username = native_dynamic_form_value(form_body != NULL ? form_body : "", "username");
    char *password = native_dynamic_form_value(form_body != NULL ? form_body : "", "password");
    char *next_path = native_dynamic_form_value(form_body != NULL ? form_body : "", "next");
    yyjson_doc *doc = NULL;
    yyjson_val *root = NULL;
    yyjson_val *user = NULL;
    char *stored_hash = NULL;
    char *session_cookie_header = NULL;
    char *session_token = NULL;
    int status = 422;
    const char *target_path = "/explore/";
 
    doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
    user = root != NULL ? find_user_by_username_runtime_local(root, username != NULL ? username : "") : NULL;
    stored_hash = user != NULL ? native_json_obj_get_string_dup(user, "password_hash") : NULL;
 
    if (stored_hash != NULL && verify_password_hash_runtime(stored_hash, password != NULL ? password : "", username != NULL ? username : "")) {
      long user_id = native_json_obj_get_long_default(user, "id", 0, NULL);
      (void)revoke_session_by_cookie_runtime(app, request->cookie);
      if (issue_browser_session_runtime(app, request, user_id, &session_token, &session_cookie_header) == 0 && session_cookie_header != NULL) {
        (void)append_rate_limit_event_runtime_local(app, "auth.login", username != NULL ? username : "", "allowed");
        target_path = (next_path != NULL && next_path[0] != '\0') ? next_path : default_signed_in_path_runtime(user);
        native_connection_printf(
          connection,
          "HTTP/1.1 302 Found\r\n"
          "Location: %s%s\r\n"
          "%s\r\n"
          "Cache-Control: no-store\r\n"
          "Content-Length: 0\r\n"
          "Connection: close\r\n"
          "\r\n",
          app->base_path != NULL ? app->base_path : "",
          target_path,
          session_cookie_header
        );
        status = 302;
      } else {
        native_send_text_response(connection, 500, "Internal Server Error", "session issuance failed\n");
        status = 500;
      }
    } else {
      char *error_params_json = NULL;
      (void)append_rate_limit_event_runtime_local(app, "auth.login", username != NULL ? username : "", "denied");
      error_params_json = login_page_params_json_dup_runtime("", "Invalid username or password.");
      if (error_params_json != NULL) {
        status = render_declared_page_response_runtime(connection, app, request, "login", "/accounts/login/", error_params_json);
        free(error_params_json);
      } else {
        native_send_text_response(connection, 422, "Unprocessable Entity", "Invalid username or password\n");
      }
    }
 
    free(form_body);
    free(username);
    free(password);
    free(next_path);
    free(stored_hash);
    free(session_cookie_header);
    free(session_token);
    native_json_doc_free(doc);
    return status;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "update_profile")) {
    long active_user_id = active_user_id_from_cookie_runtime(app->state_path, request->cookie);
    char *form_body = request_body_text_dup_runtime(request);
    char *full_name = native_dynamic_form_value(form_body != NULL ? form_body : "", "full_name");
    char *phone_number = native_dynamic_form_value(form_body != NULL ? form_body : "", "phone_number");
    char *address = native_dynamic_form_value(form_body != NULL ? form_body : "", "address");
    char *payment_preference = native_dynamic_form_value(form_body != NULL ? form_body : "", "payment_preference");
    yyjson_doc *doc = NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_mut_val *users = NULL;
    yyjson_mut_val *user = NULL;
    size_t idx = 0;
    size_t max = 0;
    int updated = 0;
 
    if (active_user_id <= 0) {
      free(form_body);
      free(full_name);
      free(phone_number);
      free(address);
      free(payment_preference);
      write_json_error(connection, 403, "Forbidden", "session_required", "Profile updates require an active session.");
      return 403;
    }
 
    if (payment_preference != NULL && payment_preference[0] != '\0'
        && !streq(payment_preference, "pay_on_site")
        && !streq(payment_preference, "credit_card")) {
      free(form_body);
      free(full_name);
      free(phone_number);
      free(address);
      free(payment_preference);
      write_json_error(connection, 422, "Unprocessable Entity", "invalid_payment_preference", "Unsupported payment preference.");
      return 422;
    }
 
    doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
    mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
    users = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "users") : NULL;
    if (mut_doc == NULL || mut_root == NULL || users == NULL || !yyjson_mut_is_arr(users)) {
      free(form_body);
      free(full_name);
      free(phone_number);
      free(address);
      free(payment_preference);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "profile state unavailable\n");
      return 500;
    }
 
    yyjson_mut_arr_foreach(users, idx, max, user) {
      if (!yyjson_mut_is_obj(user)) continue;
      if (native_json_obj_get_long_default((yyjson_val *)user, "id", 0, NULL) != active_user_id) continue;
      if (!yyjson_mut_obj_put(user, yyjson_mut_strcpy(mut_doc, "full_name"), yyjson_mut_strcpy(mut_doc, full_name != NULL ? full_name : ""))
          || !yyjson_mut_obj_put(user, yyjson_mut_strcpy(mut_doc, "phone_number"), yyjson_mut_strcpy(mut_doc, phone_number != NULL ? phone_number : ""))
          || !yyjson_mut_obj_put(user, yyjson_mut_strcpy(mut_doc, "address"), yyjson_mut_strcpy(mut_doc, address != NULL ? address : ""))
          || !yyjson_mut_obj_put(user, yyjson_mut_strcpy(mut_doc, "payment_preference"), yyjson_mut_strcpy(mut_doc, payment_preference != NULL && payment_preference[0] != '\0' ? payment_preference : "pay_on_site"))) {
        free(form_body);
        free(full_name);
        free(phone_number);
        free(address);
        free(payment_preference);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "profile update failed\n");
        return 500;
      }
      updated = 1;
      break;
    }
 
    if (!updated) {
      free(form_body);
      free(full_name);
      free(phone_number);
      free(address);
      free(payment_preference);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      write_json_error(connection, 404, "Not Found", "user_not_found", "Profile user not found.");
      return 404;
    }
 
    {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
        free(text);
        free(form_body);
        free(full_name);
        free(phone_number);
        free(address);
        free(payment_preference);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "profile persist failed\n");
        return 500;
      }
      free(text);
    }
 
    free(form_body);
    free(full_name);
    free(phone_number);
    free(address);
    free(payment_preference);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_connection_printf(
      connection,
      "HTTP/1.1 302 Found\r\n"
      "Location: %s/profile/\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : ""
    );
    return 302;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "create_appointment")) {
    long active_user_id = active_user_id_from_cookie_runtime(app->state_path, request->cookie);
    char *request_path = request_path_dup_runtime(request);
    char *business_slug = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug") : NULL;
    char *service_id_text = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "service_id") : NULL;
    long service_id = service_id_text != NULL ? strtol(service_id_text, NULL, 10) : 0;
    char *form_body = request_body_text_dup_runtime(request);
    char *date_value = native_dynamic_form_value(form_body != NULL ? form_body : "", "date");
    char *time_hour = native_dynamic_form_value(form_body != NULL ? form_body : "", "time_hour");
    char *time_minute = native_dynamic_form_value(form_body != NULL ? form_body : "", "time_minute");
    char *time_period = native_dynamic_form_value(form_body != NULL ? form_body : "", "time_period");
    char *notes = native_dynamic_form_value(form_body != NULL ? form_body : "", "notes");
    yyjson_doc *doc = NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_val *root = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_val *business = NULL;
    yyjson_val *service = NULL;
    yyjson_mut_val *appointments = NULL;
    yyjson_mut_val *appointment_obj = NULL;
    char time_value[6];
    int hour_value = 0;
    int minute_value = 0;
    int duration_minutes = 45;
    long business_id = 0;
    long technician_id = 0;
    long appointment_id = 0;
    int normalized_hour = 0;
 
    if (active_user_id <= 0) {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      write_json_error(connection, 403, "Forbidden", "session_required", "Appointments require an active session.");
      return 403;
    }
    if (business_slug == NULL || business_slug[0] == '\0' || service_id <= 0 || date_value == NULL || date_value[0] == '\0'
        || time_hour == NULL || time_hour[0] == '\0' || time_minute == NULL || time_minute[0] == '\0') {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      write_json_error(connection, 422, "Unprocessable Entity", "invalid_appointment_request", "Missing appointment booking fields.");
      return 422;
    }
 
    hour_value = atoi(time_hour);
    minute_value = atoi(time_minute);
    if (minute_value < 0 || minute_value > 59) {
      minute_value = -1;
    }
    if (time_period != NULL && time_period[0] != '\0') {
      if (hour_value < 1 || hour_value > 12 || minute_value < 0) {
        free(request_path);
        free(business_slug);
        free(service_id_text);
        free(form_body);
        free(date_value);
        free(time_hour);
        free(time_minute);
        free(time_period);
        free(notes);
        write_json_error(connection, 422, "Unprocessable Entity", "invalid_appointment_time", "Invalid appointment time.");
        return 422;
      }
      normalized_hour = hour_value % 12;
      if (streq(time_period, "PM") || streq(time_period, "pm")) {
        normalized_hour += 12;
      }
    } else {
      if (hour_value < 0 || hour_value > 23 || minute_value < 0) {
        free(request_path);
        free(business_slug);
        free(service_id_text);
        free(form_body);
        free(date_value);
        free(time_hour);
        free(time_minute);
        free(time_period);
        free(notes);
        write_json_error(connection, 422, "Unprocessable Entity", "invalid_appointment_time", "Invalid appointment time.");
        return 422;
      }
      normalized_hour = hour_value;
    }
    snprintf(time_value, sizeof(time_value), "%02d:%02d", normalized_hour, minute_value);
 
    doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
    business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
    business_id = business != NULL ? native_json_obj_get_long_default(business, "id", 0, NULL) : 0;
    service = root != NULL ? find_service_for_business_runtime_local(root, service_id, business_id) : NULL;
    if (business == NULL || service == NULL) {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      native_json_doc_free(doc);
      write_json_error(connection, 404, "Not Found", "not_found", "Business or service not found.");
      return 404;
    }
 
    duration_minutes = (int)native_json_obj_get_long_default(service, "duration_minutes", 45, NULL);
    if (duration_minutes <= 0) {
      duration_minutes = 45;
    }
    if (!business_open_for_slot_runtime_local(root, business_id, date_value, time_value, duration_minutes)) {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      native_json_doc_free(doc);
      native_send_text_response(connection, 422, "Unprocessable Entity", "Requested time is outside business availability.\n");
      return 422;
    }
 
    technician_id = assign_technician_for_slot_runtime_local(root, business_id, service_id, date_value, time_value);
    if (technician_id <= 0) {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      native_json_doc_free(doc);
      native_send_text_response(connection, 422, "Unprocessable Entity", "No technician is available for that slot.\n");
      return 422;
    }
 
    mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
    mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
    appointments = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "appointments") : NULL;
    if (mut_doc == NULL || mut_root == NULL || !yyjson_mut_is_obj(mut_root)) {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "appointment state unavailable\n");
      return 500;
    }
    if (appointments == NULL || !yyjson_mut_is_arr(appointments)) {
      appointments = yyjson_mut_arr(mut_doc);
      if (appointments == NULL || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "appointments"), appointments)) {
        free(request_path);
        free(business_slug);
        free(service_id_text);
        free(form_body);
        free(date_value);
        free(time_hour);
        free(time_minute);
        free(time_period);
        free(notes);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "appointment array unavailable\n");
        return 500;
      }
    }
 
    appointment_id = next_array_id_runtime_local(state_array_runtime_local(root, "appointments"));
    appointment_obj = yyjson_mut_obj(mut_doc);
    if (appointment_obj == NULL
        || !yyjson_mut_obj_add_int(mut_doc, appointment_obj, "id", appointment_id)
        || !yyjson_mut_obj_add_int(mut_doc, appointment_obj, "user_id", active_user_id)
        || !yyjson_mut_obj_add_int(mut_doc, appointment_obj, "business_id", business_id)
        || !yyjson_mut_obj_add_int(mut_doc, appointment_obj, "service_id", service_id)
        || !yyjson_mut_obj_add_int(mut_doc, appointment_obj, "technician_id", technician_id)
        || !yyjson_mut_obj_add_strcpy(mut_doc, appointment_obj, "date", date_value)
        || !yyjson_mut_obj_add_strcpy(mut_doc, appointment_obj, "time", time_value)
        || !yyjson_mut_obj_add_strcpy(mut_doc, appointment_obj, "status", "confirmed")
        || !yyjson_mut_obj_add_strcpy(mut_doc, appointment_obj, "notes", notes != NULL ? notes : "")
        || !yyjson_mut_arr_append(appointments, appointment_obj)) {
      free(request_path);
      free(business_slug);
      free(service_id_text);
      free(form_body);
      free(date_value);
      free(time_hour);
      free(time_minute);
      free(time_period);
      free(notes);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "appointment create failed\n");
      return 500;
    }
 
    {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
        free(text);
        free(request_path);
        free(business_slug);
        free(service_id_text);
        free(form_body);
        free(date_value);
        free(time_hour);
        free(time_minute);
        free(time_period);
        free(notes);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "appointment persist failed\n");
        return 500;
      }
      free(text);
    }
 
    free(request_path);
    free(business_slug);
    free(service_id_text);
    free(form_body);
    free(date_value);
    free(time_hour);
    free(time_minute);
    free(time_period);
    free(notes);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_connection_printf(
      connection,
      "HTTP/1.1 302 Found\r\n"
      "Location: %s/appointments/\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : ""
    );
    return 302;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "delete_appointment")) {
    long active_user_id = active_user_id_from_cookie_runtime(app->state_path, request->cookie);
    char *request_path = request_path_dup_runtime(request);
    char *appointment_id_text = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "appointment_id") : NULL;
    long appointment_id = appointment_id_text != NULL ? strtol(appointment_id_text, NULL, 10) : 0;
    yyjson_doc *doc = NULL;
    yyjson_val *root = NULL;
    yyjson_val *source_appointments = NULL;
    yyjson_arr_iter source_iter;
    yyjson_val *source_row = NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_mut_val *appointments = NULL;
    size_t idx = 0;
    size_t max = 0;
    size_t remove_index = 0;
    int removed = 0;
 
    if (active_user_id <= 0) {
      free(request_path);
      free(appointment_id_text);
      write_json_error(connection, 403, "Forbidden", "session_required", "Appointment deletion requires an active session.");
      return 403;
    }
    if (appointment_id <= 0) {
      free(request_path);
      free(appointment_id_text);
      write_json_error(connection, 422, "Unprocessable Entity", "invalid_appointment_id", "Invalid appointment id.");
      return 422;
    }
 
    doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
    source_appointments = root != NULL ? native_json_obj_get(root, "appointments") : NULL;
    mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
    mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
    appointments = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "appointments") : NULL;
    if (mut_doc == NULL || mut_root == NULL || source_appointments == NULL || !yyjson_is_arr(source_appointments)
        || appointments == NULL || !yyjson_mut_is_arr(appointments)) {
      free(request_path);
      free(appointment_id_text);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "appointment state unavailable\n");
      return 500;
    }
 
    if (yyjson_arr_iter_init(source_appointments, &source_iter)) {
      while ((source_row = yyjson_arr_iter_next(&source_iter)) != NULL) {
        if (yyjson_is_obj(source_row)
            && native_json_obj_get_long_default(source_row, "id", 0, NULL) == appointment_id
            && native_json_obj_get_long_default(source_row, "user_id", 0, NULL) == active_user_id) {
          removed = 1;
          break;
        }
        remove_index++;
      }
    }
 
    if (removed) {
      yyjson_mut_arr_remove(appointments, remove_index);
    }
 
    if (!removed) {
      free(request_path);
      free(appointment_id_text);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      write_json_error(connection, 404, "Not Found", "appointment_not_found", "Appointment not found.");
      return 404;
    }
 
    {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
        free(text);
        free(request_path);
        free(appointment_id_text);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "appointment delete persist failed\n");
        return 500;
      }
      free(text);
    }
 
    free(request_path);
    free(appointment_id_text);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    native_connection_printf(
      connection,
      "HTTP/1.1 302 Found\r\n"
      "Location: %s/appointments/\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : ""
    );
    return 302;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "update_service")) {
    char *request_path = request_path_dup_runtime(request);
    char *business_slug = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug") : NULL;
    char *service_id_text = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "service_id") : NULL;
    long service_id = service_id_text != NULL ? strtol(service_id_text, NULL, 10) : 0;
    char *name = request_form_value_dup_runtime(request, "name");
    char *description = request_form_value_dup_runtime(request, "description");
    char *cost = request_form_value_dup_runtime(request, "cost");
    char *duration_text = request_form_value_dup_runtime(request, "duration_minutes");
    char *sort_order_text = request_form_value_dup_runtime(request, "sort_order");
    char *booking_option_count_text = request_form_value_dup_runtime(request, "booking_option_count");
    char *remove_image = request_form_value_dup_runtime(request, "remove_image");
    yyjson_doc *doc = NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_val *root = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_mut_val *services = NULL;
    yyjson_mut_val *service_row = NULL;
    yyjson_val *business = NULL;
    yyjson_val *source_services = NULL;
    yyjson_val *source_technicians = NULL;
    long business_id = 0;
    long duration_minutes = duration_text != NULL ? strtol(duration_text, NULL, 10) : 0;
    long sort_order = sort_order_text != NULL ? strtol(sort_order_text, NULL, 10) : 0;
    long booking_option_count = booking_option_count_text != NULL ? strtol(booking_option_count_text, NULL, 10) : 0;
 
    if (business_slug == NULL || business_slug[0] == '\0' || service_id <= 0 || name == NULL || name[0] == '\0' || cost == NULL || cost[0] == '\0') {
      free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
      write_json_error(connection, 422, "Unprocessable Entity", "invalid_service_update", "Missing service update fields.");
      return 422;
    }
    if (duration_minutes <= 0) duration_minutes = 45;
    if (sort_order <= 0) sort_order = service_id;
    if (booking_option_count < 0) booking_option_count = 0;
 
    doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
    business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
    business_id = business != NULL ? native_json_obj_get_long_default(business, "id", 0, NULL) : 0;
    mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
    mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
    services = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "services") : NULL;
    source_services = root != NULL ? state_array_runtime_local(root, "services") : NULL;
    source_technicians = root != NULL ? state_array_runtime_local(root, "technicians") : NULL;
    if (business == NULL || mut_doc == NULL || mut_root == NULL || services == NULL || !yyjson_mut_is_arr(services) || source_services == NULL || !yyjson_is_arr(source_services)) {
      free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
      native_json_doc_free(doc); yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "service state unavailable\n");
      return 500;
    }
    {
      size_t service_count = yyjson_arr_size(source_services);
      size_t service_index = 0;
      for (service_index = 0; service_index < service_count; service_index++) {
        yyjson_val *source_service = yyjson_arr_get(source_services, service_index);
        if (yyjson_is_obj(source_service)
            && native_json_obj_get_long_default(source_service, "id", 0, NULL) == service_id
            && native_json_obj_get_long_default(source_service, "business_id", 0, NULL) == business_id) {
          service_row = yyjson_mut_arr_get(services, service_index);
          break;
        }
      }
    }
    if (service_row == NULL) {
      free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
      native_json_doc_free(doc); yyjson_mut_doc_free(mut_doc);
      write_json_error(connection, 404, "Not Found", "service_not_found", "Service not found.");
      return 404;
    }
    if (!yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "name"), yyjson_mut_strcpy(mut_doc, name))
        || !yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "description"), yyjson_mut_strcpy(mut_doc, description != NULL ? description : ""))
        || !yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "cost"), yyjson_mut_strcpy(mut_doc, cost))
        || !yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "duration_minutes"), yyjson_mut_sint(mut_doc, duration_minutes))
        || !yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "sort_order"), yyjson_mut_sint(mut_doc, sort_order))) {
      free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
      native_json_doc_free(doc); yyjson_mut_doc_free(mut_doc);
      native_send_text_response(connection, 500, "Internal Server Error", "service update failed\n");
      return 500;
    }
    {
      yyjson_mut_val *booking_options = yyjson_mut_arr(mut_doc);
      if (booking_options == NULL || !yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "booking_options"), booking_options)) {
        free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
        native_json_doc_free(doc); yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "service options update failed\n");
        return 500;
      }
      for (long option_index = 1; option_index <= booking_option_count; option_index++) {
        char key[64];
        char *label = NULL;
        char *option_duration_text = NULL;
        char *option_cost = NULL;
        long option_duration = 0;
        yyjson_mut_val *option_obj = NULL;
        snprintf(key, sizeof(key), "booking_option_label_%ld", option_index);
        label = request_form_value_dup_runtime(request, key);
        snprintf(key, sizeof(key), "booking_option_duration_%ld", option_index);
        option_duration_text = request_form_value_dup_runtime(request, key);
        snprintf(key, sizeof(key), "booking_option_cost_%ld", option_index);
        option_cost = request_form_value_dup_runtime(request, key);
        option_duration = option_duration_text != NULL ? strtol(option_duration_text, NULL, 10) : 0;
        if (label != NULL && label[0] != '\0' && option_cost != NULL && option_cost[0] != '\0' && option_duration > 0) {
          option_obj = yyjson_mut_obj(mut_doc);
          if (option_obj != NULL
              && yyjson_mut_obj_add_strcpy(mut_doc, option_obj, "label", label)
              && yyjson_mut_obj_add_int(mut_doc, option_obj, "duration_minutes", option_duration)
              && yyjson_mut_obj_add_strcpy(mut_doc, option_obj, "cost", option_cost)) {
            yyjson_mut_arr_append(booking_options, option_obj);
          }
        }
        free(label);
        free(option_duration_text);
        free(option_cost);
      }
    }
    {
      yyjson_mut_val *assigned_ids = yyjson_mut_arr(mut_doc);
      if (assigned_ids == NULL || !yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "technician_ids"), assigned_ids)) {
        free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
        native_json_doc_free(doc); yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "service technician update failed\n");
        return 500;
      }
      if (source_technicians != NULL && yyjson_is_arr(source_technicians)) {
        size_t tech_count = yyjson_arr_size(source_technicians);
        size_t tech_index = 0;
        for (tech_index = 0; tech_index < tech_count; tech_index++) {
          yyjson_val *tech_row = yyjson_arr_get(source_technicians, tech_index);
          char field_name[64];
          char *field_value = NULL;
          long technician_id = 0;
          if (!yyjson_is_obj(tech_row) || native_json_obj_get_long_default(tech_row, "business_id", 0, NULL) != business_id) {
            continue;
          }
          technician_id = native_json_obj_get_long_default(tech_row, "id", 0, NULL);
          snprintf(field_name, sizeof(field_name), "technician_%ld", technician_id);
          field_value = request_form_value_dup_runtime(request, field_name);
          if (field_value != NULL && field_value[0] != '\0') {
            yyjson_mut_arr_append(assigned_ids, yyjson_mut_sint(mut_doc, technician_id));
          }
          free(field_value);
        }
      }
    }
    {
      char *existing_image = native_json_obj_get_string_dup((yyjson_val *)service_row, "image_url");
      if (remove_image != NULL && remove_image[0] != '\0') {
        if (existing_image != NULL && existing_image[0] != '\0' && app->artifact_dir != NULL) {
          remove_media_url_file(app->artifact_dir, existing_image);
        }
        yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "image_url"), yyjson_mut_strcpy(mut_doc, ""));
      } else if (request->is_multipart && request->body_file_path != NULL && request->body_file_path[0] != '\0' && app->artifact_dir != NULL) {
        char target_url_dir[256];
        char fallback_filename[128];
        char *uploaded_media_url = NULL;
        snprintf(target_url_dir, sizeof(target_url_dir), "/media/businesses/%s/services", business_slug);
        snprintf(fallback_filename, sizeof(fallback_filename), "%s", name);
        ensure_business_media_tree(app->artifact_dir, business_slug);
        uploaded_media_url = store_uploaded_media(app->artifact_dir, request->content_type, request->body_file_path, "service_image", target_url_dir, fallback_filename);
        if (uploaded_media_url != NULL && uploaded_media_url[0] != '\0') {
          if (existing_image != NULL && existing_image[0] != '\0') {
            remove_media_url_file(app->artifact_dir, existing_image);
          }
          yyjson_mut_obj_put(service_row, yyjson_mut_strcpy(mut_doc, "image_url"), yyjson_mut_strcpy(mut_doc, uploaded_media_url));
        }
        free(uploaded_media_url);
      }
      free(existing_image);
    }
    {
      char *redirect_slug = business_slug != NULL ? strdup(business_slug) : NULL;
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      int write_code = text != NULL ? persist_app_state_text_runtime_local(app, text) : 69;
      free(text);
      free(request_path); free(business_slug); free(service_id_text); free(name); free(description); free(cost); free(duration_text); free(sort_order_text); free(booking_option_count_text); free(remove_image);
      native_json_doc_free(doc); yyjson_mut_doc_free(mut_doc);
      if (write_code != 0 || redirect_slug == NULL) {
        free(redirect_slug);
        native_send_text_response(connection, 500, "Internal Server Error", "service persist failed\n");
        return 500;
      }
      native_connection_printf(
        connection,
        "HTTP/1.1 302 Found\r\n"
        "Location: %s/businesses/%s/\r\n"
        "Cache-Control: no-store\r\n"
        "Content-Length: 0\r\n"
        "Connection: close\r\n"
        "\r\n",
        app->base_path != NULL ? app->base_path : "",
        redirect_slug
      );
      free(redirect_slug);
      return 302;
    }
  }
 
  if (match->action_id != NULL && streq(match->action_id, "create_service")) {
    char *form_body = request_body_text_dup_runtime(request);
    char *cost = native_dynamic_form_value(form_body != NULL ? form_body : "", "cost");
    if (cost == NULL || cost[0] == '\0') {
      free(form_body);
      free(cost);
      native_send_text_response(connection, 422, "Unprocessable Entity", "service_cost_required\n");
      return 422;
    }
    free(form_body);
    free(cost);
    write_json_error(connection, 501, "Not Implemented", "not_implemented", "Native service creation is not implemented yet.");
    return 501;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "create_business_availability")) {
    char *form_body = request_body_text_dup_runtime(request);
    char *day_of_week = native_dynamic_form_value(form_body != NULL ? form_body : "", "day_of_week");
    char *start_time = native_dynamic_form_value(form_body != NULL ? form_body : "", "start_time");
    char *end_time = native_dynamic_form_value(form_body != NULL ? form_body : "", "end_time");
    int start_minutes = 0;
    int end_minutes = 0;
    int day_valid = valid_day_of_week_runtime(day_of_week);
    int start_valid = time_text_to_minutes_runtime(start_time, &start_minutes);
    int end_valid = time_text_to_minutes_runtime(end_time, &end_minutes);
    if (!day_valid || !start_valid || !end_valid || end_minutes <= start_minutes) {
      free(form_body);
      free(day_of_week);
      free(start_time);
      free(end_time);
      native_send_text_response(connection, 422, "Unprocessable Entity", "Validation failed: availability_day_valid availability_end_after_start\n");
      return 422;
    }
    free(form_body);
    free(day_of_week);
    free(start_time);
    free(end_time);
    write_json_error(connection, 501, "Not Implemented", "not_implemented", "Native availability creation is not implemented yet.");
    return 501;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "rate_business")) {
    long active_user_id = active_user_id_from_cookie_runtime(app->state_path, request->cookie);
    char *request_path = request_path_dup_runtime(request);
    char *business_slug = request_path != NULL ? native_dynamic_dispatch_extract_param(match->path, request_path, "business_slug") : NULL;
    char *score_text = request_form_value_dup_runtime(request, "score");
    char *comment = request_form_value_dup_runtime(request, "comment");
    long score = score_text != NULL ? strtol(score_text, NULL, 10) : 0;
    yyjson_doc *doc = NULL;
    yyjson_val *root = NULL;
    yyjson_val *business = NULL;
    yyjson_val *source_ratings = NULL;
    yyjson_mut_doc *mut_doc = NULL;
    yyjson_mut_val *mut_root = NULL;
    yyjson_mut_val *ratings = NULL;
    yyjson_mut_val *rating_row = NULL;
    long business_id = 0;
    int updated = 0;
 
    if (active_user_id <= 0) {
      free(request_path);
      free(business_slug);
      free(score_text);
      free(comment);
      write_json_error(connection, 403, "Forbidden", "session_required", "Submitting a rating requires an active session.");
      return 403;
    }
    if (business_slug == NULL || business_slug[0] == '\0') {
      free(request_path);
      free(business_slug);
      free(score_text);
      free(comment);
      write_json_error(connection, 422, "Unprocessable Entity", "invalid_business_slug", "Missing business slug.");
      return 422;
    }
    if (score < 1 || score > 5) {
      free(request_path);
      free(business_slug);
      free(score_text);
      free(comment);
      write_json_error(connection, 422, "Unprocessable Entity", "invalid_rating_score", "Rating score must be between 1 and 5.");
      return 422;
    }
 
    doc = app->state_path != NULL ? native_json_doc_load_file(app->state_path) : NULL;
    root = doc != NULL ? yyjson_doc_get_root(doc) : NULL;
    business = root != NULL ? find_business_by_slug_runtime_local(root, business_slug) : NULL;
    business_id = business != NULL ? native_json_obj_get_long_default(business, "id", 0, NULL) : 0;
    source_ratings = root != NULL ? state_array_runtime_local(root, "ratings") : NULL;
    mut_doc = doc != NULL ? yyjson_doc_mut_copy(doc, NULL) : NULL;
    mut_root = mut_doc != NULL ? yyjson_mut_doc_get_root(mut_doc) : NULL;
    ratings = mut_root != NULL ? yyjson_mut_obj_get(mut_root, "ratings") : NULL;
 
    if (business == NULL || business_id <= 0 || mut_doc == NULL || mut_root == NULL || !yyjson_mut_is_obj(mut_root)) {
      free(request_path);
      free(business_slug);
      free(score_text);
      free(comment);
      native_json_doc_free(doc);
      yyjson_mut_doc_free(mut_doc);
      write_json_error(connection, 404, "Not Found", "business_not_found", "Business not found.");
      return 404;
    }
    if (ratings == NULL || !yyjson_mut_is_arr(ratings)) {
      ratings = yyjson_mut_arr(mut_doc);
      if (ratings == NULL || !yyjson_mut_obj_put(mut_root, yyjson_mut_strcpy(mut_doc, "ratings"), ratings)) {
        free(request_path);
        free(business_slug);
        free(score_text);
        free(comment);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "ratings array unavailable\n");
        return 500;
      }
    }
 
    if (source_ratings != NULL && yyjson_is_arr(source_ratings)) {
      size_t rating_count = yyjson_arr_size(source_ratings);
      size_t rating_index = 0;
      for (rating_index = 0; rating_index < rating_count; rating_index++) {
        yyjson_val *source_rating = yyjson_arr_get(source_ratings, rating_index);
        if (yyjson_is_obj(source_rating)
            && native_json_obj_get_long_default(source_rating, "business_id", 0, NULL) == business_id
            && native_json_obj_get_long_default(source_rating, "user_id", 0, NULL) == active_user_id) {
          rating_row = yyjson_mut_arr_get(ratings, rating_index);
          break;
        }
      }
    }
 
    if (rating_row != NULL) {
      if (!yyjson_mut_obj_put(rating_row, yyjson_mut_strcpy(mut_doc, "score"), yyjson_mut_sint(mut_doc, score))
          || !yyjson_mut_obj_put(rating_row, yyjson_mut_strcpy(mut_doc, "comment"), yyjson_mut_strcpy(mut_doc, comment != NULL ? comment : ""))) {
        free(request_path);
        free(business_slug);
        free(score_text);
        free(comment);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "rating update failed\n");
        return 500;
      }
      updated = 1;
    } else {
      long rating_id = next_array_id_runtime_local(source_ratings);
      rating_row = yyjson_mut_obj(mut_doc);
      if (rating_row == NULL
          || !yyjson_mut_obj_add_int(mut_doc, rating_row, "id", rating_id)
          || !yyjson_mut_obj_add_int(mut_doc, rating_row, "user_id", active_user_id)
          || !yyjson_mut_obj_add_int(mut_doc, rating_row, "business_id", business_id)
          || !yyjson_mut_obj_add_int(mut_doc, rating_row, "score", score)
          || !yyjson_mut_obj_add_strcpy(mut_doc, rating_row, "comment", comment != NULL ? comment : "")
          || !yyjson_mut_arr_append(ratings, rating_row)) {
        free(request_path);
        free(business_slug);
        free(score_text);
        free(comment);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", "rating create failed\n");
        return 500;
      }
    }
 
    {
      char *text = yyjson_mut_write(mut_doc, YYJSON_WRITE_NOFLAG, NULL);
      if (text == NULL || persist_app_state_text_runtime_local(app, text) != 0) {
        free(text);
        free(request_path);
        free(business_slug);
        free(score_text);
        free(comment);
        native_json_doc_free(doc);
        yyjson_mut_doc_free(mut_doc);
        native_send_text_response(connection, 500, "Internal Server Error", updated ? "rating update persist failed\n" : "rating create persist failed\n");
        return 500;
      }
      free(text);
    }
 
    native_connection_printf(
      connection,
      "HTTP/1.1 302 Found\r\n"
      "Location: %s/b/%s/\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : "",
      business_slug != NULL ? business_slug : ""
    );
    free(request_path);
    free(business_slug);
    free(score_text);
    free(comment);
    native_json_doc_free(doc);
    yyjson_mut_doc_free(mut_doc);
    return 302;
  }
 
  if (match->action_id != NULL && streq(match->action_id, "logout")) {
    char *clear_cookie_header = session_cookie_header_dup_runtime(app, request, NULL, 1);
    (void)revoke_session_by_cookie_runtime(app, request->cookie);
    native_connection_printf(
      connection,
      "HTTP/1.1 302 Found\r\n"
      "Location: %s/accounts/login/\r\n"
      "%s\r\n"
      "Cache-Control: no-store\r\n"
      "Content-Length: 0\r\n"
      "Connection: close\r\n"
      "\r\n",
      app->base_path != NULL ? app->base_path : "",
      clear_cookie_header != NULL ? clear_cookie_header : ""
    );
    free(clear_cookie_header);
    return 302;
  }
 
  write_json_error(connection, 501, "Not Implemented", "not_implemented", "This action is not implemented in the native runtime yet.");
  return 501;
}
 
/* ------------------------------------------------------------------ */
/* Public API                                                          */
/* ------------------------------------------------------------------ */
 
const char *native_dynamic_runtime_host_profile(void) {
  return DYNAMIC_HOST_PROFILE;
}
 
int native_dynamic_runtime_handle_request(
  const AppRuntime *app,
  const HttpRequest *request,
  NativeConnection *connection
) {
  char *route_fixture_path = NULL;
  char *request_path = NULL;
  char *query = NULL;
  NativeDynamicRouteMatch *match = NULL;
  NativeDynamicRelationalRequestSync relational_sync = {0};
  int status = 500;
  const char *target;
 
  if (app == NULL || request == NULL || connection == NULL) {
    if (connection != NULL) {
      native_send_text_response(connection, 500, "Internal Server Error", "null parameters\n");
    }
    return 500;
  }
 
  target = request->target != NULL ? request->target : "/";
 
  fprintf(stderr, "dynamic_handler_enter: target=%s app_id=%s artifact_dir=%s\n",
    target,
    app->app_id != NULL ? app->app_id : "NULL",
    app->artifact_dir != NULL ? app->artifact_dir : "NULL");
  fflush(stderr);
 
  /* Strip query string and remove any mounted app base path for route matching */
  request_path = route_request_path_dup_runtime(app, request);
  if (request_path == NULL) {
    native_send_text_response(connection, 500, "Internal Server Error", "memory allocation failed\n");
    return 500;
  }
 
  /* Extract query string for parameter handling */
  {
    char raw_query[MAX_QUERY_LEN];
    extract_query(target, raw_query, sizeof(raw_query));
    if (raw_query[0] != '\0') {
      query = strdup(raw_query);
    }
  }
 
  if (native_dynamic_relational_prepare_request_state(app, &relational_sync) != 0) {
    native_send_text_response(connection, 500, "Internal Server Error", "relational runtime prepare failed\n");
    free(request_path);
    free(query);
    return 500;
  }
 
  /* 1. Try static asset serving first */
  if (app->artifact_dir != NULL && native_dynamic_media_is_static_path(request_path)) {
    status = native_dynamic_media_serve_asset(connection, app->artifact_dir, request_path, request);
    goto cleanup;
  }
 
  /* 2. Serve runtime state from the app state file */
  if (streq(request_path, "/api/state")) {
    if (app->app_id != NULL && streq(app->app_id, "dynamic_app_template")) {
      status = write_proof_state_api_response(connection, app->state_path);
      goto cleanup;
    }
    if (app->state_path != NULL && path_exists(app->state_path)) {
      yyjson_doc *state_doc = native_json_doc_load_file(app->state_path);
      char *state_text = state_doc != NULL ? yyjson_write(state_doc, YYJSON_WRITE_NOFLAG, NULL) : read_file_text(app->state_path);
      if (state_text != NULL) {
        int state_len = (int)strlen(state_text);
        native_connection_printf(
          connection,
          "HTTP/1.1 200 OK\r\n"
          "Content-Type: application/json\r\n"
          "Content-Length: %d\r\n"
          "Connection: close\r\n"
          "\r\n%s",
          state_len,
          state_text
        );
        native_json_doc_free(state_doc);
        free(state_text);
        status = 200;
        goto cleanup;
      }
      native_json_doc_free(state_doc);
    }
    /* State file missing or unreadable — return empty object */
    native_connection_printf(
      connection,
      "HTTP/1.1 200 OK\r\n"
      "Content-Type: application/json\r\n"
      "Content-Length: 2\r\n"
      "Connection: close\r\n"
      "\r\n{}"
    );
    status = 200;
    goto cleanup;
  }
 
  if (request->method != NULL && streq(request->method, "POST")) {
    if (is_business_availability_api_list_path_runtime(request_path)) {
      char *body_text = request_body_text_dup_runtime(request);
      yyjson_doc *body_doc = NULL;
      yyjson_val *body_root = load_root_from_text_runtime(body_text != NULL ? body_text : "{}", &body_doc);
      yyjson_val *day_value = body_root != NULL ? native_json_obj_get(body_root, "day_of_week") : NULL;
      yyjson_val *start_value = body_root != NULL ? native_json_obj_get(body_root, "start_time") : NULL;
      yyjson_val *end_value = body_root != NULL ? native_json_obj_get(body_root, "end_time") : NULL;
      char *day_of_week = (day_value != NULL && yyjson_is_str(day_value)) ? strdup(yyjson_get_str(day_value)) : NULL;
      char *start_time = (start_value != NULL && yyjson_is_str(start_value)) ? strdup(yyjson_get_str(start_value)) : NULL;
      char *end_time = (end_value != NULL && yyjson_is_str(end_value)) ? strdup(yyjson_get_str(end_value)) : NULL;
      int start_minutes = 0;
      int end_minutes = 0;
      int day_valid = valid_day_of_week_runtime(day_of_week);
      int start_valid = time_text_to_minutes_runtime(start_time, &start_minutes);
      int end_valid = time_text_to_minutes_runtime(end_time, &end_minutes);
      if (!day_valid || !start_valid || !end_valid || end_minutes <= start_minutes) {
        native_connection_printf(
          connection,
          "HTTP/1.1 422 Unprocessable Entity\r\n"
          "Content-Type: application/json\r\n"
          "Connection: close\r\n"
          "\r\n{\"errors\":[\"availability_day_valid\",\"availability_end_after_start\"]}"
        );
        free(body_text);
        free(day_of_week);
        free(start_time);
        free(end_time);
        native_json_doc_free(body_doc);
        status = 422;
        goto cleanup;
      }
      free(body_text);
      free(day_of_week);
      free(start_time);
      free(end_time);
      native_json_doc_free(body_doc);
      write_json_error(connection, 501, "Not Implemented", "not_implemented", "Native availability API creation is not implemented yet.");
      status = 501;
      goto cleanup;
    }
  }
 
  if (request->method != NULL && streq(request->method, "GET")) {
    if (is_business_services_api_list_path_runtime(request_path)) {
      char *business_slug = native_dynamic_dispatch_extract_param("/api/businesses/:business_slug/services/", request_path, "business_slug");
      if (business_slug != NULL) {
        status = write_business_services_api_response(connection, app->state_path, business_slug);
        free(business_slug);
        goto cleanup;
      }
    }
    if (is_business_availability_api_list_path_runtime(request_path)) {
      char *business_slug = native_dynamic_dispatch_extract_param("/api/businesses/:business_slug/availability/", request_path, "business_slug");
      if (business_slug != NULL) {
        status = write_business_availability_api_response(connection, app->state_path, business_slug);
        free(business_slug);
        goto cleanup;
      }
    }
    if (is_business_services_api_schema_path_runtime(request_path)) {
      char *business_slug = native_dynamic_dispatch_extract_param("/api/businesses/:business_slug/services/schema/", request_path, "business_slug");
      if (business_slug != NULL) {
        status = write_generated_surface_schema_response(connection, app, app->state_path, business_slug, "service_generated_api");
        free(business_slug);
        goto cleanup;
      }
    }
    if (is_business_availability_api_schema_path_runtime(request_path)) {
      char *business_slug = native_dynamic_dispatch_extract_param("/api/businesses/:business_slug/availability/schema/", request_path, "business_slug");
      if (business_slug != NULL) {
        status = write_generated_surface_schema_response(connection, app, app->state_path, business_slug, "business_availability_generated_api");
        free(business_slug);
        goto cleanup;
      }
    }
  }
 
  /* 2. Try to match against the route fixture */
  route_fixture_path = native_dynamic_dispatch_resolve_route_fixture(app->artifact_dir, app->app_id);
  if (route_fixture_path == NULL) {
    /* No route fixture available; try the dispatch table as a fallback */
    if (app->artifact_dir != NULL) {
      char *dispatch_file = native_dynamic_dispatch_response_file(app->artifact_dir, request->method, request_path);
      if (dispatch_file != NULL) {
        status = native_dynamic_media_serve_asset(connection, app->artifact_dir, request_path, request);
        free(dispatch_file);
        goto cleanup;
      }
    }
    write_json_error(connection, 404, "Not Found", "not_found", "No route fixture available and no dispatch match.");
    status = 404;
    goto cleanup;
  }
 
  /* Match the request path against the route fixture */
  {
    int match_result = native_dynamic_dispatch_match(
      route_fixture_path,
      request->method != NULL ? request->method : "GET",
      request_path,
      &match
    );
 
    if (match_result < 0) {
      int exists = route_fixture_path != NULL ? path_exists(route_fixture_path) : 0;
      fprintf(stderr, "dynamic_dispatch_error: path=%s exists=%d app_id=%s artifact_dir=%s\n",
        route_fixture_path != NULL ? route_fixture_path : "NULL",
        exists,
        app->app_id != NULL ? app->app_id : "NULL",
        app->artifact_dir != NULL ? app->artifact_dir : "NULL");
      fflush(stderr);
      write_json_error(connection, 500, "Internal Server Error", "dispatch_error", "route fixture load failed");
      status = 500;
      goto cleanup;
    }
 
    if (match_result > 0 || match == NULL) {
      /* No route matched — try the dispatch table */
      if (app->artifact_dir != NULL) {
        char *dispatch_file = native_dynamic_dispatch_response_file(app->artifact_dir, request->method, request_path);
        if (dispatch_file != NULL) {
          status = native_dynamic_media_serve_asset(connection, app->artifact_dir, request_path, request);
          free(dispatch_file);
          goto cleanup;
        }
      }
      write_json_error(connection, 404, "Not Found", "not_found", "No matching route for this path.");
      status = 404;
      goto cleanup;
    }
  }
 
  /* 3. Route matched — dispatch based on kind */
  {
    char *csrf_token = csrf_token_for_response(request->cookie);
    if (match->kind != NULL && streq(match->kind, "action")) {
      status = handle_action_route(connection, app, request, match);
    } else {
      status = handle_page_route(connection, app, request, match, request_path, query, csrf_token);
    }
    free(csrf_token);
  }
 
cleanup:
  if (native_dynamic_relational_sync_back_if_changed(app, &relational_sync) != 0 && status < 400) {
    status = 500;
  }
  native_dynamic_relational_request_sync_free(&relational_sync);
  native_dynamic_dispatch_free_match(match);
  free(route_fixture_path);
  free(request_path);
  free(query);
  return status;
}