@extends('layouts.app')

@section('title','Tenant administration')

@section('content')

<x-page-header eyebrow="TENANT ADMINISTRATION" :title="$workspace->name" :description="'Workspace: '.$workspace->slug.' · '.$workspace->timezone"><a href="/platform" class="button secondary">Back to platform</a></x-page-header>

<div class="stat-grid"><section class="stat-card"><span>Workspace access</span><strong class="text-stat">{{ ucfirst($workspace->status) }}</strong><small>Subscription restrictions also apply</small></section><section class="stat-card"><span>Registered users</span><strong>{{ $usage['users'] }} <small>/ {{ $effectiveUserLimit }}</small></strong><small>Lower company or plan limit applies</small></section><section class="stat-card"><span>Employee records</span><strong>{{ $usage['employees'] }}</strong><small>Current company records</small></section><section class="stat-card"><span>Document records</span><strong>{{ $usage['documents'] }}</strong><small>Current vault records</small></section></div>

<div class="platform-overview"><section class="panel"><div class="panel-heading"><h2>Workspace profile</h2></div><div class="panel-body"><form method="post" action="/platform/tenants/{{ $workspace->id }}/profile">@csrf<label>Company name<input name="name" value="{{ $workspace->name }}" maxlength="160" required></label><x-timezone-select :value="$workspace->timezone"/><p class="hint">Workspace address: <code>/t/{{ $workspace->slug }}</code></p><button class="button primary">Save tenant profile</button></form></div></section><section class="panel" id="ocr"><div class="panel-heading"><h2>OCR assistance</h2><span class="badge {{ $workspace->ocr_enabled?'green':'gray' }}">{{ $workspace->ocr_enabled?'Enabled':'Disabled' }}</span></div><div class="panel-body"><p>Extract text from scanned documents to assist human review. OCR is disabled by default for existing and new tenants.</p><form method="post" action="/platform/tenants/{{ $workspace->id }}/ocr">@csrf<label>OCR availability<select name="ocr_enabled"><option value="0" @selected(!$workspace->ocr_enabled)>Disabled · manual document entry</option><option value="1" @selected($workspace->ocr_enabled)>Enabled · optional extraction</option></select></label><button class="button primary">Save OCR setting</button></form><p class="hint">Manual dates and expiry reminders continue when disabled. Existing encrypted suggestions are retained but hidden. Enabling requires a compatible OCR engine on the server.</p></div></section></div>

<section class="panel" id="capacity"><div class="panel-heading"><h2>Company capacity controls</h2><p>{{ $usage['branches'] }} branches · {{ $usage['users'] }} users · {{ $usage['employees'] }} employees</p></div><div class="panel-body"><form method="post" action="/platform/tenants/{{ $workspace->id }}/capacity" class="form-grid">@csrf
@include('platform.capacity-fields')
<div class="form-span form-actions"><p class="hint">Only Super Admin can change these controls. Empty limits add no extra cap. Existing records are retained when branch creation is disabled; numeric limits cannot be below current usage.</p><button class="button primary"><x-icon name="shield"/>Save company limits</button></div></form></div></section>

<section class="panel"><div class="panel-heading"><h2>Tenant access</h2><span class="badge {{ $workspace->status==='active'?'green':'amber' }}">{{ ucfirst($workspace->status) }}</span></div><div class="panel-body"><form method="post" action="/platform/tenants/{{ $workspace->id }}/status">@csrf<div class="form-grid"><label>Workspace access<select name="status"><option value="active" @selected($workspace->status==='active')>Active</option><option value="suspended" @selected($workspace->status==='suspended')>Suspended</option></select></label><div><p class="hint">Suspension blocks company workspace access, including existing sessions, on their next request. Records are retained. Reactivation still requires a valid subscription.</p><label class="checkbox-label"><input type="checkbox" name="confirm" value="1" required>I confirm this tenant access change</label></div></div><button class="button secondary">Update tenant access</button></form></div></section>

<section class="panel"><div class="panel-heading"><h2>Subscription & deployment</h2><span class="badge green">{{ ucfirst($subscription->status) }}</span></div><div class="panel-body"><form method="post" action="/platform/tenants/{{ $workspace->id }}/subscription" class="form-grid">@csrf<label>Plan<select name="plan_id">@foreach($plans as $plan)<option value="{{ $plan->id }}" @selected($subscription->plan_id===$plan->id)>{{ $plan->name }} · {{ $plan->user_limit }} users</option>@endforeach</select></label><label>Status<select name="status">@foreach(['active','trial','suspended'] as $status)<option value="{{ $status }}" @selected($subscription->status===$status)>{{ \Illuminate\Support\Str::headline($status) }}</option>@endforeach</select></label><label>Deployment mode<select name="mode"><option value="saas" @selected($subscription->mode==='saas')>Shared SaaS</option><option value="dedicated" @selected($subscription->mode==='dedicated')>Dedicated deployment</option></select></label><label>Expires on (optional, UTC)<input type="date" name="ends_at" value="{{ $subscription->ends_at?->toDateString() }}"></label><div class="form-span form-actions"><p class="hint">Deployment mode records the installation arrangement. This local setup requires no cloud or DNS configuration. Subscription dates use UTC.</p><button class="button primary">Update subscription</button></div></form></div></section>

<section class="panel"><div class="panel-heading"><div><h2>Module entitlements</h2><p>Enforced by the backend, with dependency checks and data retention</p></div></div>@php($uiRows1=\App\Support\ListView::rows($modules,'modules'))
<x-list-tools :items="$uiRows1" name="modules"/>
<div class="table-scroll"><table data-ui-list="true"><thead><tr><th>Module</th><th>Dependencies</th><th>Delivery</th><th>Entitlement</th><th>Control</th></tr></thead><tbody>@foreach($uiRows1 as $module)<tr><td><strong>{{ $module->name }}</strong></td><td>{{ implode(', ',$module->dependencies) ?: 'Foundation' }}</td><td><span class="badge {{ $module->available?'green':'gray' }}">{{ $module->available?'Available':'Future phase' }}</span></td><td>{{ ($enabled[$module->id] ?? false)?'Enabled':'Disabled' }}</td><td>@if($module->available && $module->id!=='organization')<form method="post" action="/platform/tenants/{{ $workspace->id }}/modules">@csrf<input type="hidden" name="module_id" value="{{ $module->id }}"><input type="hidden" name="enabled" value="{{ ($enabled[$module->id] ?? false)?'0':'1' }}"><button class="button secondary small">{{ ($enabled[$module->id] ?? false)?'Disable':'Enable' }}</button></form>@else<span class="muted">{{ $module->id==='organization'?'Required':'Not yet available' }}</span>@endif</td></tr>@endforeach</tbody></table></div>
<x-list-pagination :items="$uiRows1"/>
</section>

<section class="panel"><div class="panel-heading"><h2>Company accounts</h2><p>Read-only account and MFA overview</p></div>@php($uiRows2=\App\Support\ListView::rows($users,'users'))
<x-list-tools :items="$uiRows2" name="users"/>
<div class="table-scroll"><table data-ui-list="true"><thead><tr><th>Name</th><th>Email</th><th>Account</th><th>MFA</th></tr></thead><tbody>@foreach($uiRows2 as $user)<tr><td>{{ $user->name }}</td><td>{{ $user->email }}</td><td>{{ $user->disabled_at?'Disabled':'Enabled' }}</td><td><span class="badge {{ $user->two_factor_confirmed_at?'green':'amber' }}">{{ $user->two_factor_confirmed_at?'Enrolled':'Optional · not enabled' }}</span></td></tr>@endforeach</tbody></table></div>
<x-list-pagination :items="$uiRows2"/>
<div class="pagination"></div></section>

<section class="panel"><div class="panel-heading"><h2>Recent administration activity</h2><p>Latest 12 tenant management events &middot; UTC</p></div>@php($uiRows3=\App\Support\ListView::rows($activity,'audit_logs'))
<x-list-tools :items="$uiRows3" name="audit_logs"/>
<div class="table-scroll"><table data-ui-list="true"><thead><tr><th>Time</th><th>Event</th><th>Actor</th><th>Subject</th></tr></thead><tbody>@forelse($uiRows3 as $event)<tr><td>{{ $event->created_at->format('d M Y H:i') }}</td><td>{{ $event->action }}</td><td>{{ $event->actor_id ?? 'System' }}</td><td>{{ $event->subject }}</td></tr>@empty<tr><td colspan="4">No administration events recorded.</td></tr>@endforelse</tbody></table></div>
<x-list-pagination :items="$uiRows3"/>
</section>

@endsection