@extends('layouts.app')
@section('content')
<div class="page-bar d-flex flex-wrap justify-content-between align-items-center gap-3 mb-3">
    <div>
        <div class="page-kicker">Administration</div>
        <h1 class="page-title">Staff & access</h1>
        <div class="muted-line">Create staff users and decide who can access each module.</div>
    </div>
    <span class="quick-chip"><i class="bi bi-shield-lock"></i> Admin controlled</span>
</div>

<div class="row g-3">
    <div class="col-xl-4">
        <div class="panel panel-pad">
            <h2 class="panel-title mb-1">Add staff user</h2>
            <div class="panel-subtitle mb-3">New users can login immediately after creation.</div>
            <form method="post" action="{{ route('users.store') }}">
                @csrf
                <label class="form-label">Name</label>
                <input class="form-control mb-2" name="name" required>
                <label class="form-label">Email</label>
                <input class="form-control mb-2" type="email" name="email" required>
                <label class="form-label">Phone</label>
                <input class="form-control mb-2" name="phone">
                <label class="form-label">Password</label>
                <input class="form-control mb-2" type="password" name="password" required>
                <label class="form-label">Role</label>
                <select class="form-select mb-3" name="role" data-role-select>
                    <option value="operator">Operator</option>
                    <option value="supervisor">Supervisor</option>
                    <option value="administrator">Administrator</option>
                </select>
                <label class="form-check mb-3"><input class="form-check-input" type="checkbox" name="is_active" value="1" checked> Active account</label>
                <div class="detail-label mb-2">Permissions</div>
                <div class="row g-2 mb-3">
                    @foreach($permissions as $key => $label)
                        <div class="col-12">
                            <label class="form-check">
                                <input class="form-check-input permission-check" type="checkbox" name="permissions[]" value="{{ $key }}" @checked(in_array($key, $rolePresets['operator'], true))>
                                {{ $label }}
                            </label>
                        </div>
                    @endforeach
                </div>
                <button class="btn btn-primary w-100"><i class="bi bi-person-plus me-1"></i> Create user</button>
            </form>
        </div>
    </div>

    <div class="col-xl-8">
        <div class="panel panel-pad">
            <div class="d-flex justify-content-between align-items-start mb-3">
                <div>
                    <h2 class="panel-title">Access matrix</h2>
                    <div class="panel-subtitle">Update role, active status, password and permissions for each user.</div>
                </div>
            </div>
            <div class="accordion" id="staffAccordion">
                @foreach($users as $user)
                    <div class="accordion-item border rounded mb-2">
                        <h2 class="accordion-header">
                            <button class="accordion-button collapsed" type="button" data-bs-toggle="collapse" data-bs-target="#staff{{ $user->id }}">
                                <span class="fw-bold me-2">{{ $user->name }}</span>
                                <span class="badge badge-soft me-2">{{ strtoupper($user->role) }}</span>
                                <span class="muted-line">{{ $user->email }}</span>
                            </button>
                        </h2>
                        <div id="staff{{ $user->id }}" class="accordion-collapse collapse" data-bs-parent="#staffAccordion">
                            <div class="accordion-body">
                                <form method="post" action="{{ route('users.update', $user) }}" class="row g-3">
                                    @csrf
                                    @method('put')
                                    <div class="col-md-6"><label class="form-label">Name</label><input class="form-control" name="name" value="{{ $user->name }}" required></div>
                                    <div class="col-md-6"><label class="form-label">Email</label><input class="form-control" type="email" name="email" value="{{ $user->email }}" required></div>
                                    <div class="col-md-6"><label class="form-label">Phone</label><input class="form-control" name="phone" value="{{ $user->phone }}"></div>
                                    <div class="col-md-6"><label class="form-label">New password</label><input class="form-control" type="password" name="password" placeholder="Leave blank to keep same"></div>
                                    <div class="col-md-6"><label class="form-label">Role</label><select class="form-select" name="role" data-role-select><option value="operator" @selected($user->role === 'operator')>Operator</option><option value="supervisor" @selected($user->role === 'supervisor')>Supervisor</option><option value="administrator" @selected($user->role === 'administrator')>Administrator</option></select></div>
                                    <div class="col-md-6 d-flex align-items-end"><label class="form-check mb-2"><input class="form-check-input" type="checkbox" name="is_active" value="1" @checked($user->is_active)> Active account</label></div>
                                    <div class="col-12">
                                        <div class="detail-label mb-2">Permissions</div>
                                        <div class="row g-2">
                                            @foreach($permissions as $key => $label)
                                                <div class="col-md-6">
                                                    <label class="form-check">
                                                        <input class="form-check-input permission-check" type="checkbox" name="permissions[]" value="{{ $key }}" @checked(in_array($key, $user->permissions ?? [], true) || $user->role === 'administrator') @disabled($user->id === auth()->id())>
                                                        {{ $label }}
                                                    </label>
                                                </div>
                                            @endforeach
                                        </div>
                                    </div>
                                    <div class="col-12"><button class="btn btn-primary"><i class="bi bi-save me-1"></i> Save access</button></div>
                                </form>
                            </div>
                        </div>
                    </div>
                @endforeach
            </div>
        </div>
    </div>
</div>
@endsection
@push('scripts')
<script>
const rolePresets = @json($rolePresets);
document.querySelectorAll('form').forEach(form => {
    const role = form.querySelector('[data-role-select]');
    if (!role) return;
    role.addEventListener('change', () => {
        const preset = rolePresets[role.value] || [];
        form.querySelectorAll('.permission-check').forEach(check => {
            check.checked = preset.includes(check.value);
            check.disabled = role.value === 'administrator';
        });
    });
});
</script>
@endpush