@extends('layouts.app')
@section('title','Droits & rôles · '.$organization->name)
@section('eyebrow','Administrer')
@section('heading','Droits & rôles')

@section('content')
@php
$icons=[
0=>'—',
1=>'<svg viewBox="0 0 24 24"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg>',
2=>'<svg viewBox="0 0 24 24"><path d="M12 20h9"/><path d="M16.5 3.5a2.1 2.1 0 013 3L7 19l-4 1 1-4z"/></svg>',
3=>'<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="3"/><path d="M12 1v4M12 19v4M4.2 4.2l2.8 2.8M17 17l2.8 2.8M1 12h4M19 12h4"/></svg>',
];
@endphp
<div class="access-module">
  <div class="access-toolbar">
    <div class="access-tabs">
      <button class="active" type="button" data-access-tab="matrix">Rôles (matrice)</button>
      <button type="button" data-access-tab="people">Personnes & exceptions</button>
    </div>
    <span class="spacer"></span>
    <button class="btn secondary" type="button" data-access-role-open>Nouveau rôle sur mesure</button>
  </div>

  <section data-access-panel="matrix">
    <form method="post" action="{{ route('tenant.access.matrix.save') }}">
      @csrf
      <div class="access-card">
        <header><div><h2>Droits par rôle</h2><p>Clique une case pour passer de Aucun à Voir, Agir puis Administrer.</p></div><button class="btn primary">Enregistrer</button></header>
        <div class="access-legend"><span>Aucun</span><span class="l1">Voir</span><span class="l2">Agir</span><span class="l3">Administrer</span><span class="spacer"></span><small>Direction : tous droits, non éditable</small></div>
        <div class="access-matrix-wrap">
          <table class="access-matrix">
            <thead>
              <tr>
                <th>Fonction</th>
                @foreach($roles as $role)
                  <th>
                    <span class="access-role-heading">
                      <span>
                        {{ $role->label }}
                        <small>
                          {{ $role->is_system
                              ? 'tous droits'
                              : $role->role_type }}
                        </small>
                      </span>

                      @unless($role->is_system)
                        <button
                          type="button"
                          class="access-role-edit"
                          data-access-role-edit
                          data-role-id="{{ $role->id }}"
                          data-role-label="{{ $role->label }}"
                          aria-label="Modifier le rôle {{ $role->label }}"
                          title="Modifier le rôle"
                        >
                          <svg viewBox="0 0 24 24">
                            <path d="M12 20h9"/>
                            <path d="M16.5 3.5a2.1 2.1 0 0 1 3 3L7 19l-4 1 1-4Z"/>
                          </svg>
                        </button>
                      @endunless
                    </span>
                  </th>
                @endforeach
              </tr>
            </thead>
            <tbody>
            @foreach($functions as $group=>$items)
              <tr class="group"><td colspan="{{ $roles->count()+1 }}">{{ $group }}</td></tr>
              @foreach($items as $function)
                <tr>
                  <td><b>{{ $function->label }}</b></td>
                  @foreach($roles as $role)
                    @php($level=(int)optional($role->permissions->firstWhere('function_key',$function->function_key))->access_level)
                    <td>
                      <button type="button" class="access-cycle" data-level="{{ $role->is_system ? 3 : $level }}" @disabled($role->is_system) data-access-cycle>
                        <span data-access-icon>{!! $icons[$role->is_system ? 3 : $level] !!}</span>
                        @unless($role->is_system)
                        <input type="hidden" name="permissions[{{ $role->id }}][{{ $function->function_key }}]" value="{{ $level }}">
                        @endunless
                      </button>
                    </td>
                  @endforeach
                </tr>
              @endforeach
            @endforeach
            </tbody>
          </table>
        </div>
      </div>
    </form>
  </section>

  <section data-access-panel="people" hidden>
    <div class="access-people">
      <aside class="access-card access-member-list">
        <header><h2>Membres</h2></header>
        @foreach($members as $member)
          @php($memberRoles=$assignments->get($member->id,collect()))
          @php($memberExceptions=$exceptions->get($member->id,collect()))
          <button type="button" class="{{ $loop->first ? 'active' : '' }}" data-access-person="{{ $member->id }}">
            <span class="avatar">{{ mb_strtoupper(mb_substr($member->name,0,2)) }}</span>
            <span><b>{{ $member->name }}</b><small>{{ $memberRoles->pluck('role.label')->filter()->join(' · ') ?: 'Aucun rôle' }}</small></span>
            @if($memberExceptions->count())<em>{{ $memberExceptions->count() }} exception(s)</em>@endif
          </button>
        @endforeach
      </aside>

      <div>
      @foreach($members as $member)
        @php($memberRoles=$assignments->get($member->id,collect()))
        @php($memberExceptions=$exceptions->get($member->id,collect()))
        <article class="access-card access-person-detail" data-access-person-panel="{{ $member->id }}" @if(!$loop->first) hidden @endif>
          <header><span class="avatar large">{{ mb_strtoupper(mb_substr($member->name,0,2)) }}</span><div><h2>{{ $member->name }}</h2><p>{{ $member->email }}</p></div></header>
          <form
            method="post"
            action="{{ route(
                'tenant.access.user-roles.update',
                $member
            ) }}"
            class="access-user-roles-form"
          >
            @csrf
            @method('PUT')

            <div class="access-user-roles-head">
              <div>
                <h3>Rôles cumulatifs</h3>
                <p>
                  Le droit effectif correspond au niveau le plus élevé.
                </p>
              </div>

              <button class="btn secondary">
                Enregistrer les rôles
              </button>
            </div>

            <div class="access-user-role-options">
              @foreach($roles as $role)
                <label>
                  <input
                    type="checkbox"
                    name="role_ids[]"
                    value="{{ $role->id }}"
                    @checked(
                      $memberRoles->pluck('role_id')
                        ->contains($role->id)
                    )
                  >
                  <span>{{ $role->label }}</span>
                </label>
              @endforeach
            </div>
          </form>

          <section>
            <h3>Exceptions individuelles</h3>
            @forelse($memberExceptions as $exception)
              <div class="access-permission-row">
                <div><b>{{ optional($functions->flatten()->firstWhere('function_key',$exception->function_key))->label }}</b><small>{{ $exception->reason }} · {{ $exception->effective_at?->format('d/m/Y H:i') }}</small></div>
                <span class="{{ $exception->exception_direction==='grant' ? 'grant' : 'revoke' }}">{{ $exception->exception_direction==='grant' ? 'Droit ajouté' : 'Droit retiré' }}</span>
                <strong>Niveau {{ $exception->access_level }}</strong>
              </div>
            @empty
              <p class="access-empty">Aucune exception individuelle.</p>
            @endforelse
            <form method="post" action="{{ route('tenant.access.exceptions.create',$member) }}" class="access-exception-form">
              @csrf
              <select name="function_key" required><option value="">Fonction</option>@foreach($functions->flatten() as $function)<option value="{{ $function->function_key }}">{{ $function->label }}</option>@endforeach</select>
              <select name="exception_direction"><option value="grant">Ajouter un droit</option><option value="revoke">Retirer un droit</option></select>
              <select name="access_level"><option value="1">Voir</option><option value="2">Agir</option><option value="3">Administrer</option></select>
              <input name="reason" placeholder="Motif obligatoire" required>
              <button class="btn primary">Ajouter</button>
            </form>
          </section>
          <section><h3>Droits hérités des rôles</h3>
            @foreach($functions->flatten() as $function)
              @php($max=$memberRoles->flatMap(fn($a)=>$a->role?->permissions ?? collect())->where('function_key',$function->function_key)->max('access_level') ?? 0)
              @if($max>0)<div class="access-permission-row"><div><b>{{ $function->label }}</b><small>Via rôle</small></div><strong>{{ ['','Voir','Agir','Administrer'][$max] }}</strong></div>@endif
            @endforeach
          </section>
        </article>
      @endforeach
      </div>
    </div>
  </section>

  <dialog class="access-dialog" data-access-role-dialog>
    <form method="post" action="{{ route('tenant.access.roles.create') }}">
      @csrf
      <header><h2>Nouveau rôle sur mesure</h2><button type="button" data-access-role-close>×</button></header>
      <label>Nom du rôle<input name="label" required></label>
      <label>Copier les droits de<select name="copy_from"><option value="">Aucun rôle</option>@foreach($roles as $role)<option value="{{ $role->id }}">{{ $role->label }}</option>@endforeach</select></label>
      <footer><button type="button" class="btn secondary" data-access-role-close>Annuler</button><button class="btn primary">Créer le rôle</button></footer>
    </form>
  </dialog>
  <dialog class="access-dialog" data-access-role-edit-dialog>
    <form
      method="post"
      action=""
      data-access-role-edit-form
      data-action-template="{{ route(
          'tenant.access.roles.update',
          ['role' => '__ROLE__']
      ) }}"
    >
      @csrf
      @method('PATCH')

      <header>
        <h2>Modifier le rôle</h2>
        <button type="button" data-access-role-edit-close>
          ×
        </button>
      </header>

      <label>
        Nom du rôle
        <input
          name="label"
          required
          maxlength="160"
          data-access-role-edit-label
        >
      </label>

      <p class="access-dialog-help">
        Les niveaux Voir, Agir et Administrer se modifient
        directement dans la matrice.
      </p>

      <footer>
        <button
          type="button"
          class="btn secondary"
          data-access-role-edit-close
        >
          Annuler
        </button>

        <button class="btn primary">
          Enregistrer
        </button>
      </footer>
    </form>
  </dialog>

</div>
@endsection