@extends('adminlte::page')

@section('title', 'Platform Users')

@include('partials.ui-polish')

@section('content_header')
    <div class="d-flex align-items-center justify-content-between flex-wrap">
        <div>
            <h1 class="m-0">Platform Users</h1>
            <span class="text-muted">Manage Platform Super Admin and NGO Admin accounts only</span>
        </div>
        <div class="module-actions mt-2 mt-sm-0">
            <button type="button" class="btn btn-success btn-sm" data-toggle="collapse" data-target="#platform-user-form">
                <i class="fas fa-user-plus mr-1"></i> Add Admin Account
            </button>
            <a href="{{ route('admin.platform.security') }}" class="btn btn-outline-primary btn-sm">
                <i class="fas fa-shield-alt mr-1"></i> Security
            </a>
        </div>
    </div>
@stop

@section('content')
    @if(session('success'))
        <x-adminlte-alert theme="success" title="Done" dismissable>{{ session('success') }}</x-adminlte-alert>
    @endif

    @if($errors->any())
        <x-adminlte-alert theme="danger" title="Please review the form" dismissable>
            <ul class="mb-0">@foreach($errors->all() as $error)<li>{{ $error }}</li>@endforeach</ul>
        </x-adminlte-alert>
    @endif

    <div class="collapse module-panel {{ $errors->any() ? 'show' : '' }}" id="platform-user-form">
        <x-adminlte-card title="Add Platform / NGO Admin Account" icon="fas fa-user-plus" theme="success">
            <form method="POST" action="{{ route('admin.platform.users.store') }}">
                @csrf
                <div class="row">
                    <div class="col-lg-3">
                        <x-adminlte-select name="organization_id" label="Organization" required>
                            @foreach($organizations as $organization)
                                <option value="{{ $organization->id }}" @selected((int) old('organization_id', $selectedOrganizationId ?: $organizations->first()?->id) === $organization->id)>
                                    {{ $organization->name }}
                                </option>
                            @endforeach
                        </x-adminlte-select>
                    </div>
                    <div class="col-lg-3"><x-adminlte-input name="name" label="Name" value="{{ old('name') }}" required/></div>
                    <div class="col-lg-3"><x-adminlte-input name="email" label="Email" type="email" value="{{ old('email') }}" required/></div>
                    <div class="col-lg-3">
                        <x-adminlte-select name="role" label="Role" required>
                            @foreach($roles as $role)
                                <option value="{{ $role }}" @selected(old('role', 'NGO Admin') === $role)>{{ $role }}</option>
                            @endforeach
                        </x-adminlte-select>
                    </div>
                    <div class="col-lg-3"><x-adminlte-input name="password" label="Temporary Password" type="password" required/></div>
                </div>
                <button type="submit" class="btn btn-success"><i class="fas fa-save mr-1"></i> Save User</button>
            </form>
        </x-adminlte-card>
    </div>

    <x-adminlte-alert theme="info" title="Tenant user privacy">
        Platform Super Admin can see the number of users per tenant in Organizations. Individual tenant staff accounts are managed inside the NGO workspace and are not shown here.
    </x-adminlte-alert>

    <x-adminlte-card title="Admin Account Directory" icon="fas fa-user-shield" theme="primary">
        <form method="GET" action="{{ route('admin.platform.users') }}" class="mb-3">
            <div class="row">
                <div class="col-md-4">
                    <x-adminlte-select name="organization_id" igroup-size="sm">
                        <option value="">All organizations</option>
                        @foreach($organizations as $organization)
                            <option value="{{ $organization->id }}" @selected($selectedOrganizationId === $organization->id)>{{ $organization->name }}</option>
                        @endforeach
                    </x-adminlte-select>
                </div>
                <div class="col-md-5">
                    <x-adminlte-input name="search" igroup-size="sm" placeholder="Search name, email, or role" value="{{ $search }}"/>
                </div>
                <div class="col-md-3">
                    <button type="submit" class="btn btn-primary btn-sm btn-block"><i class="fas fa-search mr-1"></i> Search</button>
                </div>
            </div>
        </form>

        <div class="table-responsive">
            <table class="table table-hover text-nowrap mb-0">
                <thead>
                    <tr>
                        <th>User</th>
                        <th>Organization</th>
                        <th>Role</th>
                        <th>Status</th>
                        <th style="min-width: 320px;">Update</th>
                        <th class="text-right">Security</th>
                    </tr>
                </thead>
                <tbody>
                    @forelse($users as $user)
                        <tr>
                            <td><strong>{{ $user->name }}</strong><div class="text-muted small">{{ $user->email }}</div></td>
                            <td>{{ $user->organization?->name ?? 'Platform' }}</td>
                            <td><span class="badge badge-info">{{ $user->role }}</span></td>
                            <td>
                                @if($user->locked_at)
                                    <span class="badge badge-danger">Locked</span>
                                @else
                                    <span class="badge badge-success">Active</span>
                                @endif
                                @if($user->force_password_reset)
                                    <span class="badge badge-warning">Reset required</span>
                                @endif
                            </td>
                            <td>
                                <form method="POST" action="{{ route('admin.platform.users.update', $user) }}">
                                    @csrf
                                    @method('PUT')
                                    <div class="row">
                                        <div class="col-md-6">
                                            <select name="organization_id" class="form-control form-control-sm mb-1" required>
                                                @foreach($organizations as $organization)
                                                    <option value="{{ $organization->id }}" @selected($user->organization_id === $organization->id)>{{ $organization->name }}</option>
                                                @endforeach
                                            </select>
                                        </div>
                                        <div class="col-md-6"><input type="text" name="name" class="form-control form-control-sm mb-1" value="{{ $user->name }}" required></div>
                                        <div class="col-md-6"><input type="email" name="email" class="form-control form-control-sm mb-1" value="{{ $user->email }}" required></div>
                                        <div class="col-md-6">
                                            <select name="role" class="form-control form-control-sm mb-1" required>
                                                @foreach($roles as $role)
                                                    <option value="{{ $role }}" @selected($user->role === $role)>{{ $role }}</option>
                                                @endforeach
                                            </select>
                                        </div>
                                        <div class="col-md-6"><input type="password" name="password" class="form-control form-control-sm mb-1" placeholder="New password optional"></div>
                                    </div>
                                    <button type="submit" class="btn btn-xs btn-outline-primary"><i class="fas fa-save"></i> Update</button>
                                </form>
                            </td>
                            <td class="text-right">
                                @if($user->locked_at)
                                    <form method="POST" action="{{ route('admin.platform.users.unlock', $user) }}" class="d-inline">
                                        @csrf
                                        <button type="submit" class="btn btn-xs btn-outline-success"><i class="fas fa-unlock"></i> Unlock</button>
                                    </form>
                                @else
                                    <form method="POST" action="{{ route('admin.platform.users.lock', $user) }}" class="d-inline">
                                        @csrf
                                        <button type="submit" class="btn btn-xs btn-outline-danger" @disabled(auth()->id() === $user->id)><i class="fas fa-lock"></i> Lock</button>
                                    </form>
                                @endif
                                <form method="POST" action="{{ route('admin.platform.users.force-password-reset', $user) }}" class="d-inline">
                                    @csrf
                                    <button type="submit" class="btn btn-xs btn-outline-warning"><i class="fas fa-key"></i> Reset</button>
                                </form>
                            </td>
                        </tr>
                    @empty
                        <tr><td colspan="6" class="text-center text-muted py-4">No users found.</td></tr>
                    @endforelse
                </tbody>
            </table>
        </div>

        @if($users->hasPages())
            <div class="mt-3">{{ $users->links() }}</div>
        @endif
    </x-adminlte-card>
@stop