@extends('layouts.dashboard')

@section('content')
@php
/**
 * Admin → Roles. What each role in the platform may do, and how many accounts hold it.
 *
 * @var array $roles      role rows in display order
 * @var array $permCounts role id => privileges held
 * @var array $userCounts role slug => live accounts
 */
$roles = $roles ?? [];
$permCounts = $permCounts ?? [];
$userCounts = $userCounts ?? [];
$catalogueTotal = count(\App\Models\Role::catalogueSlugs());
@endphp
@php /* .qm-d2: the dashboard density standard (app.css §35) */
@endphp
<div class="qm-d2">
@php // Page primary action → top-bar subheader slot (leaves the table card header for the
//      title + any table-scoped utility). ob_start captures the button HTML for the layout slot.
ob_start();
@endphp
<a href="{{ route('admin.roles.new') }}" class="qm-btn"><i class="fas fa-plus me-2" aria-hidden="true"></i>{{ t_raw('admin.roles.new_btn') }}</a>
@php \App\Support\View::slot('subhead', ob_get_clean());
@endphp
<div class="qm-card">
    <div class="qm-ops-head">
        <div class="d-flex align-items-center gap-2">
            <h2 class="mb-0">{{ t_raw('admin.roles.list_heading') }}</h2>
            <span class="qm-pill qm-pill-grey">{{ t_raw('admin.roles.total_pill', [':count' => count($roles)]) }}</span>
        </div>
    </div>
    <div class="table-responsive">
    <table class="qm-table" data-sortable>
        <thead><tr>
            <th scope="col" data-sort="text">{{ t_raw('admin.roles.col_role') }}</th>
            <th scope="col" data-sort="number">{{ t_raw('admin.roles.col_permissions') }}</th>
            <th scope="col" data-sort="number">{{ t_raw('admin.roles.col_users') }}</th>
            <th class="text-end" scope="col">{{ t_raw('common.actions') }}</th>
        </tr></thead>
        <tbody>
            @foreach ($roles as $r)
@php $rid    = (int) $r['id'];
                $slug   = (string) $r['slug'];
                $staff  = ($r['scope'] ?? '') === 'staff';
                $system = (int) ($r['is_system'] ?? 0) === 1;
                $perms  = (int) ($permCounts[$rid] ?? 0);
                $users  = (int) ($userCounts[$slug] ?? 0);
                // A platform identity holds what owning its data implies, so its privilege
                // count is the whole catalogue rather than a stored list.
                $shown  = $staff ? $perms : ($slug === 'super_admin' || $slug === 'vendor' ? $catalogueTotal : 0); @endphp
            <tr>
                <td>
                    <div class="qm-tbl-id">
                        <div class="qm-tbl-id-text">
                            <strong>{{ role_label($slug) }}</strong>
                            @if (!empty($r['description']))<small>{{ $r['description'] }}</small>@endif
                            <div class="mt-1">
                                {!! role_pill($slug) !!}
                                @if ($system)<span class="qm-pill qm-pill-grey">{{ t_raw('admin.roles.pill_system') }}</span>@endif
                            </div>
                        </div>
                    </div>
                </td>
                <td data-sort-value="{{ $shown }}">
                    @if ($staff)
                    <a class="qm-tbl-link" href="{{ url('/admin/roles/' . $rid) }}">{{ number_format($shown) }}</a>
                    @elseif ($shown > 0)
                    {{ number_format($shown) }}
                    @else
                    {!! dash() !!}
                    @endif
                </td>
                <td data-sort-value="{{ $users }}">
                    @if ($users > 0)
                    <a class="qm-tbl-link" href="{{ url('/admin/users?role=' . rawurlencode($slug)) }}">{{ number_format($users) }}</a>
                    @else{!! dash() !!}@endif
                </td>
                <td class="qm-actions-cell">
                    @php
                    $rowActions = [
                        $staff ? [
                            'label'   => t_raw('common.edit'),
                            'icon'    => 'fa-pen',
                            'href'    => '/admin/roles/' . $rid,
                            'primary' => true,
                        ] : [
                            // Nothing to grant or revoke on a platform identity, so the row
                            // says so rather than offering a control that does nothing.
                            'label'    => t_raw('admin.roles.action_structural'),
                            'icon'     => 'fa-lock',
                            'primary'  => true,
                            'disabled' => true,
                        ],
                        $system ? null : [
                            'label'  => t_raw('common.delete'),
                            'icon'   => 'fa-trash-alt',
                            'danger' => true,
                            'form'   => [
                                'action'  => '/admin/roles/delete',
                                'fields'  => ['id' => $rid],
                                'confirm' => t_raw('admin.roles.confirm_delete', [':name' => role_label($slug)]),
                            ],
                        ],
                    ];
@endphp
                    @partial('row-actions', ['actions' => array_values(array_filter($rowActions))])
                </td>
            </tr>
            @endforeach
        </tbody>
    </table>
    </div>
</div>

</div>@php /* /.qm-d2 */
@endphp
@endsection