@extends('layouts.app')
@section('title','People & access')
@section('content')
<x-page-header eyebrow="IDENTITY & ACCESS" title="The right access for every person." description="Manage company accounts and scoped permissions. Start with Company Admin, Employee or Manager, then tailor capabilities for your company."/>
<x-management-sections module="identity"/>

@if(in_array(\App\Support\ModulePages::page(),['index']))
<section class="panel"><div class="panel-heading"><h2>Workspace accounts</h2><span class="badge green">Company scoped</span></div>@php($uiRows1=\App\Support\ListView::rows($users,'users'))
<x-list-tools :items="$uiRows1" name="users"/>
<div class="table-scroll"><table data-ui-list="true"><thead><tr><th>Name</th><th>Email</th><th>MFA</th><th>Role assignment</th></tr></thead><tbody>@foreach($uiRows1 as $user)<tr><td><strong>{{ $user->name }}</strong></td><td>{{ $user->email }}</td><td><span class="badge {{ $user->two_factor_confirmed_at?'green':'amber' }}">{{ $user->two_factor_confirmed_at?'Confirmed':'Optional · not enabled' }}</span></td><td><form class="inline-form" method="post" action="{{ $base }}/users/{{ $user->id }}/role">@csrf<select name="role_id" aria-label="Role for {{ $user->name }}">@foreach($roles as $role)<option value="{{ $role->id }}" @selected($user->role_id===$role->id)>{{ $role->name }}</option>@endforeach</select><button class="button secondary small" @disabled($user->id===auth()->id())>Save</button></form></td></tr>@endforeach</tbody></table></div>
<x-list-pagination :items="$uiRows1"/>
<div class="pagination"></div></section>
@endif
@if(in_array(\App\Support\ModulePages::page(),['create']))
<section class="panel"><div class="panel-heading"><h2>Create account</h2></div><div class="panel-body"><form method="post" action="{{ $base }}/users" class="form-grid">@csrf<label>Full name<input name="name" required value="{{ old('name') }}"></label><label>Email<input name="email" type="email" required value="{{ old('email') }}"></label><label>Initial password<input name="password" type="password" autocomplete="new-password" minlength="12" required></label><label>Confirm password<input name="password_confirmation" type="password" autocomplete="new-password" required></label><label>Role<select name="role_id">@foreach($roles as $role)<option value="{{ $role->id }}">{{ $role->name }}</option>@endforeach</select></label><div class="form-span form-actions"><p class="hint">Use 12+ characters with upper and lowercase letters, numbers, and symbols. Share credentials through a secure channel.</p><button class="button primary"><x-icon name="plus"/> Create account</button></div></form></div></section>
@endif
@if(in_array(\App\Support\ModulePages::page(),['roles','role-edit']))
<section class="panel"><div class="panel-heading"><h2>Roles & permissions</h2><p>Each company owns its role capabilities. Existing custom roles are retained.</p></div>@php($uiroles=\App\Support\ListView::rows($roles,'roles'))<x-list-tools :items="$uiroles" name="roles"/><div class="role-grid">@foreach($uiroles as $role)<details open class="role-card"><summary>{{ $role->name }} @if(array_key_exists($role->name, \App\Domain\Identity\RolePresets::all()))<span class="badge green">Predefined</span>@endif <span class="badge gray">{{ count($role->permissions) }}</span></summary>@if(\App\Support\ModulePages::page()==='role-edit')<form method="post" action="{{ $base }}/roles/{{ $role->id }}" data-role-editor data-role-presets="{{ json_encode(\App\Domain\Identity\RolePresets::all()) }}">@csrf<label>Load preset capabilities<select data-role-preset><option value="">Keep current capabilities</option>@foreach(\App\Domain\Identity\RolePresets::all() as $preset=>$capabilities)<option>{{ $preset }}</option>@endforeach</select><small>Review the selected capabilities, then save to apply them to this company role.</small></label><label>Role name<input name="name" value="{{ $role->name }}" required></label><label>Find a capability<input type="search" data-capability-search placeholder="e.g. attendance"></label>@foreach($permissions as $permission)<label class="checkbox-label" data-capability="{{ $permission }}"><input type="checkbox" name="permissions[]" value="{{ $permission }}" @checked(in_array($permission,$role->permissions,true))>{{ $permission }}</label>@endforeach<button class="button secondary small">Save permissions</button>@if($role->name==='Company Admin')<p class="hint">Keep Company Admin with Company settings and People &amp; access capabilities to prevent lockout. Other capabilities are editable.</p>@endif</form>@else <a class="button secondary" href="{{ $base }}/identity/roles/{{ $role->id }}/edit">Edit {{ $role->name }}</a>@endif</details>@endforeach</div><x-list-pagination :items="$uiroles"/></section>
@endif
@if(\App\Support\ModulePages::page()==='roles-create')<div class="panel-body"><h3>Create a custom role</h3><form method="post" action="{{ $base }}/roles" data-role-editor data-role-presets="{{ json_encode(\App\Domain\Identity\RolePresets::all()) }}"><label>Start from a predefined role<select data-role-preset><option value="">Choose capabilities manually</option>@foreach(\App\Domain\Identity\RolePresets::all() as $preset=>$capabilities)<option>{{ $preset }}</option>@endforeach</select><small>This creates your own copy. It does not change existing roles.</small></label>@csrf<label class="narrow-input">Role name<input name="name" required maxlength="80" placeholder="e.g. Organization auditor"></label><div class="permission-grid"><label>Find a capability<input type="search" data-capability-search placeholder="e.g. attendance"></label>@foreach($permissions as $permission)<label class="checkbox-label" data-capability="{{ $permission }}"><input type="checkbox" name="permissions[]" value="{{ $permission }}">{{ $permission }}</label>@endforeach</div><button class="button primary">Create role</button></form></div>@endif
@endsection