@extends('layouts.admin')
@section('title','Pengguna & Role')
@section('content')
<div class="page-head"><div><h1 class="page-title">Role & Pengguna Tenant</h1><p class="page-subtitle">Kelola data login, password, status, dan kewenangan user {{ $company->name }}.</p></div><button class="btn btn-gold" data-dialog-open="#newTenantUser"><i data-lucide="user-plus"></i> Tambah User Admin</button></div>

<div class="tenant-user-toolbar">
    <div class="card admin-quota-card {{ $adminUsage['is_full'] ? 'quota-full' : '' }}"><span class="stat-icon {{ $adminUsage['is_full'] ? 'danger' : 'success' }}"><i data-lucide="users"></i></span><div><small>KUOTA ADMIN AKTIF • {{ strtoupper($adminUsage['plan']?->name ?? $company->plan) }}</small><strong>{{ $adminUsage['used'] }} / {{ $adminUsage['limit'] ?? '∞' }}</strong><p>{{ $adminUsage['is_full'] ? 'Kuota penuh. Nonaktifkan admin yang tidak digunakan atau upgrade paket.' : ($adminUsage['remaining'] === null ? 'Tanpa batas jumlah admin aktif.' : $adminUsage['remaining'].' slot admin aktif masih tersedia.') }}</p></div></div>
    <form class="card user-search" method="get"><div class="field"><label>Cari pengguna</label><div class="search-control"><i data-lucide="search"></i><input name="q" value="{{ request('q') }}" placeholder="Nama atau email..."></div></div><button class="btn btn-primary">Cari</button>@if(request('q'))<a class="btn btn-ghost" href="{{ route('admin.users.index') }}">Reset</a>@endif</form>
</div>

<div class="role-hierarchy">@foreach($roleLabels as $key=>$label)<div class="role-tier"><b>{{ App\Models\User::ROLE_LEVELS[$key] }}</b><div><strong>{{ $label }}</strong><span>{{ ['owner'=>'Kendali penuh dan role tertinggi.','super_admin'=>'Administrasi tenant dan seluruh modul.','admin'=>'Master data, operasional, payroll, dan keamanan.','hr_manager'=>'HR, workforce, payroll, pengguna, dan approval lintas departemen.','hrd'=>'Operasional karyawan, absensi, workforce, dan payroll.','finance'=>'Payroll, BPJS, dan export Finance.','department_head'=>'Approval anggota departemen yang dipimpin.','project_manager'=>'Project, crew, dan freelance.','supervisor'=>'Monitoring operasional dan approval terbatas.','employee'=>'Portal absensi, pengajuan, profil, dan slip gaji.'][$key] }}</span></div></div>@endforeach</div>

<div class="card table-wrap"><table class="data-table"><thead><tr><th>Pengguna</th><th>Unit Kerja</th><th>Role</th><th>Level</th><th>Status</th><th>Login Terakhir</th><th>Aksi</th></tr></thead><tbody>
@forelse($items as $user)
    @php($canEditProfile = auth()->id()===$user->id || auth()->user()->canManageUser($user))
    <tr><td><strong>{{ $user->name }}</strong><div class="tiny muted">{{ $user->email }} @if(auth()->id()===$user->id)• Akun Anda @endif</div></td><td>{{ $user->employee?->department?->name ?: 'Administrasi tenant' }}</td><td><span class="badge">{{ $user->roleLabel() }}</span></td><td><span class="role-level">L{{ $user->roleLevel() }}</span></td><td><span class="badge {{ $user->status }}">{{ strtoupper($user->status) }}</span></td><td>{{ $user->last_login_at?->diffForHumans()??'Belum pernah' }}</td><td><button class="btn btn-ghost btn-sm" data-dialog-open="#editTenantUser{{ $user->id }}" @disabled(!$canEditProfile) aria-label="Edit data {{ $user->name }}"><i data-lucide="pencil"></i> Edit</button></td></tr>
@empty<tr><td colspan="7" class="empty">Pengguna tidak ditemukan.</td></tr>@endforelse
</tbody></table></div><div style="margin-top:16px">{{ $items->links() }}</div>

<dialog class="modal" id="newTenantUser"><form method="post" action="{{ route('admin.users.store') }}">@csrf
    <div class="modal-head split"><div><strong>Tambah User Admin</strong><div class="tiny muted">Admin aktif {{ $adminUsage['used'] }} / {{ $adminUsage['limit'] ?? '∞' }} • Owner sudah termasuk</div></div><button type="button" class="btn btn-ghost btn-sm" data-dialog-close><i data-lucide="x"></i></button></div>
    <div class="modal-body stack">@if($adminUsage['is_full'])<div class="flash flash-error"><i data-lucide="circle-alert"></i><span>Kuota admin aktif sudah penuh. Anda masih dapat membuat akun berstatus Nonaktif atau meminta upgrade paket.</span></div>@endif<div class="form-grid"><div class="field"><label>Nama lengkap</label><input class="control" name="name" required></div><div class="field"><label>Email login</label><input class="control" type="email" name="email" required></div><div class="field"><label>Role</label><select class="control" name="role">@foreach($creatableRoles as $role=>$label)@if(auth()->user()->role==='owner' || App\Models\User::ROLE_LEVELS[$role] < auth()->user()->roleLevel())<option value="{{ $role }}">{{ $label }}</option>@endif @endforeach</select></div><div class="field"><label>Status</label><select class="control" name="status"><option value="active" @disabled($adminUsage['is_full'])>Aktif</option><option value="inactive" @selected($adminUsage['is_full'])>Nonaktif / siapkan akun</option></select></div><div class="field"><label>Password awal</label><input class="control" type="password" name="password" minlength="10" required></div><div class="field"><label>Konfirmasi password</label><input class="control" type="password" name="password_confirmation" minlength="10" required></div></div><button class="btn btn-gold"><i data-lucide="user-plus"></i> Tambah User Admin</button></div>
</form></dialog>

@foreach($items as $user)
@php($canEditProfile = auth()->id()===$user->id || auth()->user()->canManageUser($user))
@php($canManageAccess = auth()->id()!==$user->id && auth()->user()->canManageUser($user))
@if($canEditProfile)
<dialog class="modal" id="editTenantUser{{ $user->id }}"><form method="post" action="{{ route('admin.users.update',$user) }}">@csrf @method('PUT')
    <div class="modal-head split"><div><strong>Edit Data Pengguna</strong><div class="tiny muted">{{ $user->roleLabel() }} • Level {{ $user->roleLevel() }}</div></div><button type="button" class="btn btn-ghost btn-sm" data-dialog-close><i data-lucide="x"></i></button></div>
    <div class="modal-body stack"><div class="form-grid"><div class="field"><label>Nama lengkap</label><input class="control" name="name" value="{{ $user->name }}" required></div><div class="field"><label>Email login</label><input class="control" type="email" name="email" value="{{ $user->email }}" required></div><div class="field"><label>Role</label><select class="control" name="role" @disabled(!$canManageAccess || $user->role==='owner')>@foreach($roleLabels as $role=>$label)@if($role!=='owner' && (($user->employee && $role==='employee') || $role!=='employee') && (auth()->user()->role==='owner' || App\Models\User::ROLE_LEVELS[$role] < auth()->user()->roleLevel() || $user->role===$role))<option value="{{ $role }}" @selected($user->role===$role)>{{ $label }}</option>@elseif($user->role==='owner' && $role==='owner')<option value="owner">{{ $label }}</option>@endif @endforeach</select>@if(!$canManageAccess || $user->role==='owner')<input type="hidden" name="role" value="{{ $user->role }}">@endif</div><div class="field"><label>Status</label><select class="control" name="status" @disabled(!$canManageAccess)><option value="active" @selected($user->status==='active')>Aktif</option><option value="inactive" @selected($user->status==='inactive')>Nonaktif</option></select>@if(!$canManageAccess)<input type="hidden" name="status" value="{{ $user->status }}">@endif</div></div><div class="password-update-box"><div><strong>Ganti / Reset Password</strong><span>Kosongkan bila password tidak ingin diubah.</span></div><div class="form-grid"><div class="field"><label>Password baru</label><input class="control" type="password" name="password" minlength="10"></div><div class="field"><label>Konfirmasi password</label><input class="control" type="password" name="password_confirmation" minlength="10"></div></div></div><button class="btn btn-primary"><i data-lucide="save"></i> Simpan Data Pengguna</button></div>
</form></dialog>
@endif
@endforeach
@endsection