{{-- resources/views/ui/security/audit/index.blade.php --}}

@php
    use Illuminate\Support\Str;

    $q = $q ?? request('q', '');
    $level = $level ?? request('level', 'alle');
    $stationId = $stationId ?? (int) request('station_id', 0);
    $userId = $userId ?? (int) request('user_id', 0);
    $from = $from ?? request('from', '');
    $to = $to ?? request('to', '');
    $ip = $ip ?? request('ip', '');
    $ua = $ua ?? request('ua', '');

    $ability = $ability ?? request('ability', 'alle');
    $permission = $permission ?? request('permission', 'alle');

    $levels = [
        'alle' => 'Alle',
        'info' => 'Info',
        'warn' => 'Warnung',
        'kritisch' => 'Kritisch',
    ];

    $abilities = [
        'alle' => 'Alle',
        'perm' => 'perm',
        'view' => 'view',
        'update' => 'update',
        'delete' => 'delete',
        'create' => 'create',
    ];

    $levelPill = function ($lvl) {
        return match ($lvl) {
            'kritisch' => 'bg-red-50 text-red-700 border-red-200',
            'warn' => 'bg-amber-50 text-amber-700 border-amber-200',
            'info' => 'bg-emerald-50 text-emerald-700 border-emerald-200',
            default => 'bg-neutral-100 text-rk-slate border-rk',
        };
    };

    $permissionOptions = $permissionOptions ?? collect();
    $quickPermissions = $quickPermissions ?? collect();
@endphp

<x-layouts.app title="Audit Log" userRole="{{ auth()->user()->isDistrictUser() ? 'Bezirksstelle' : 'Ortstelle' }}">
    <div class="flex flex-col gap-4">

        {{-- Header --}}
        <div class="flex flex-col sm:flex-row sm:items-end sm:justify-between gap-3">
            <div>
                <div class="text-xl font-semibold">Audit Log</div>
                <div class="mt-1 text-sm text-rk-slate">Sicherheitsrelevante Aktionen, nachvollziehbar & exportierbar.
                </div>
            </div>

            <div class="flex flex-wrap items-center gap-2">
                <a href="{{ route('security.audit.index') }}" class="btn-rk-soft">
                    Aktualisieren
                </a>

                <a href="{{ route('security.audit.export', request()->query()) }}" class="btn-rk-soft">
                    Export CSV
                </a>

                <a href="{{ route('security.audit.export_xlsx', request()->query()) }}" class="btn-rk-soft">
                    Export XLSX
                </a>
            </div>
        </div>

        {{-- Filters --}}
        <form method="GET" action="{{ route('security.audit.index') }}"
            class="rounded-3xl bg-white border border-rk p-4 shadow-sm">
            <div class="grid grid-cols-1 lg:grid-cols-12 gap-3 lg:items-end">

                <div class="lg:col-span-5">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Suche</label>
                    <input name="q" value="{{ $q }}"
                        class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm focus:ring-2 ring-rk focus:border-transparent"
                        placeholder="Action, Subject, Email, ID…">
                </div>

                <div class="lg:col-span-2">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Level</label>
                    <select name="level" class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                        @foreach ($levels as $k => $lbl)
                            <option value="{{ $k }}" @selected($level === $k)>{{ $lbl }}
                            </option>
                        @endforeach
                    </select>
                </div>

                <div class="lg:col-span-2">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Von</label>
                    <input name="from" type="date" value="{{ $from }}"
                        class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                </div>

                <div class="lg:col-span-2">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Bis</label>
                    <input name="to" type="date" value="{{ $to }}"
                        class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                </div>

                <div class="lg:col-span-1 flex gap-2">
                    <a href="{{ route('security.audit.index') }}"
                        class="w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm font-semibold hover:bg-neutral-50 text-center transition-rk hover:shadow-button">
                        Reset
                    </a>
                </div>

                @if (auth()->user()->isDistrictUser())
                    <div class="lg:col-span-3">
                        <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Ortstelle</label>
                        <select name="station_id"
                            class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                            <option value="0">Alle</option>
                            @foreach ($stations as $s)
                                <option value="{{ $s->id }}" @selected((int) $stationId === (int) $s->id)>{{ $s->name }}
                                </option>
                            @endforeach
                        </select>
                    </div>

                    <div class="lg:col-span-3">
                        <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Benutzer</label>
                        <select name="user_id"
                            class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                            <option value="0">Alle</option>
                            @foreach ($users as $u)
                                <option value="{{ $u->id }}" @selected((int) $userId === (int) $u->id)>{{ $u->name }}
                                    ({{ $u->email }})
                                </option>
                            @endforeach
                        </select>
                    </div>
                @endif

                <div class="lg:col-span-3">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">IP</label>
                    <input name="ip" value="{{ $ip }}"
                        class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm focus:ring-2 ring-rk focus:border-transparent"
                        placeholder="127.0.0.1">
                </div>

                <div class="lg:col-span-3">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">User-Agent</label>
                    <input name="ua" value="{{ $ua }}"
                        class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm focus:ring-2 ring-rk focus:border-transparent"
                        placeholder="Chrome, Firefox, iPhone…">
                </div>

                <div class="lg:col-span-2">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Ability</label>
                    <select name="ability" class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                        @foreach ($abilities as $k => $lbl)
                            <option value="{{ $k }}" @selected($ability === $k)>{{ $lbl }}
                            </option>
                        @endforeach
                    </select>
                </div>

                <div class="lg:col-span-4">
                    <label class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider">Permission</label>
                    <select name="permission"
                        class="mt-2 w-full rounded-2xl border border-rk bg-white px-4 py-3 text-sm">
                        <option value="alle" @selected($permission === 'alle')>Alle</option>
                        @foreach ($permissionOptions as $group => $names)
                            <optgroup label="{{ $group }}.*">
                                @foreach ($names as $permName)
                                    <option value="{{ $permName }}" @selected($permission === $permName)>
                                        {{ $permName }}</option>
                                @endforeach
                            </optgroup>
                        @endforeach
                    </select>
                </div>

                {{-- Quick chips from DB --}}
                @if ($quickPermissions->count())
                    <div class="lg:col-span-12 pt-1">
                        <div class="flex flex-wrap items-center gap-2">
                            <span
                                class="text-xs font-semibold text-rk-slate/80 uppercase tracking-wider mr-1">Quick:</span>

                            @foreach ($quickPermissions as $perm)
                                <a href="{{ route('security.audit.index', array_merge(request()->except(['page']), ['permission' => $perm, 'ability' => 'perm'])) }}"
                                    class="rounded-full px-3 py-1 text-xs font-semibold border
                                   {{ request('permission', 'alle') === $perm && request('ability', 'alle') === 'perm'
                                       ? 'bg-rk-red text-white border-transparent'
                                       : 'bg-white border-rk text-rk-charcoal hover:bg-neutral-50' }}">
                                    {{ $perm }}
                                </a>
                            @endforeach

                            <a href="{{ route('security.audit.index', array_merge(request()->except(['page']), ['permission' => 'alle', 'ability' => 'alle'])) }}"
                                class="ml-auto rounded-2xl border border-rk bg-white px-4 py-2 text-xs font-semibold hover:bg-neutral-50">
                                Filter zurücksetzen
                            </a>
                        </div>
                    </div>
                @endif

                <div class="lg:col-span-12">
                    <button
                        class="rounded-2xl bg-rk-red px-4 py-2.5 text-sm font-semibold text-white hover:bg-rk-red-dark hover:shadow-button">
                        Filtern
                    </button>
                </div>

            </div>
        </form>

        {{-- Table --}}
        <div class="rounded-3xl bg-white border border-rk shadow-sm overflow-hidden">
            <div class="overflow-x-auto">
                <table class="w-full text-sm">
                    <thead class="sticky top-0 z-10 text-xs text-rk-slate/80 uppercase tracking-wider bg-neutral-50">
                        <tr class="border-t border-b border-rk">
                            <th class="py-3 px-5 text-left whitespace-nowrap">Zeitpunkt</th>
                            <th class="py-3 px-5 text-left whitespace-nowrap">Level</th>
                            <th class="py-3 px-5 text-left">Action</th>
                            <th class="py-3 px-5 text-left">Actor</th>
                            <th class="py-3 px-5 text-left">Ortstelle</th>
                            <th class="py-3 px-5 text-left whitespace-nowrap">IP</th>
                            <th class="py-3 px-5 text-left">UA</th>
                            <th class="py-3 px-5 text-left whitespace-nowrap">Subject</th>
                            <th class="py-3 px-5 text-left">Meta</th>
                            <th class="py-3 px-5 text-right whitespace-nowrap">Details</th>
                        </tr>
                    </thead>

                    <tbody class="divide-y divide-[color:var(--rk-border)]">
                        @forelse($logs as $r)
                            @php
                                $meta = $r->meta;
                                if (is_string($meta)) {
                                    $decoded = json_decode($meta, true);
                                    $meta = json_last_error() === JSON_ERROR_NONE ? $decoded : $meta;
                                }

                                $metaPreview = '—';
                                if (is_array($meta)) {
                                    $flat = [];
                                    foreach ($meta as $k => $v) {
                                        if (is_array($v) || is_object($v)) {
                                            continue;
                                        }
                                        $flat[] = $k . ': ' . $v;
                                    }
                                    $metaPreview = count($flat) ? implode(' · ', $flat) : 'JSON';
                                    $metaPreview = Str::limit($metaPreview, 140);
                                } elseif (is_string($meta) && $meta !== '') {
                                    $metaPreview = Str::limit($meta, 140);
                                }

                                $uaStr = (string) ($r->user_agent ?? '');
                            @endphp

                            <tr class="hover:bg-neutral-50 align-top">
                                <td class="py-4 px-5 text-rk-slate whitespace-nowrap">
                                    {{ optional($r->created_at)->format('d.m.Y H:i') }}
                                </td>

                                <td class="py-4 px-5">
                                    <span
                                        class="inline-flex items-center rounded-full px-3 py-1 text-xs font-semibold border {{ $levelPill($r->level) }}">
                                        {{ $r->level ?? '—' }}
                                    </span>
                                </td>

                                <td class="py-4 px-5">
                                    <div class="font-semibold">{{ $r->action }}</div>
                                </td>

                                <td class="py-4 px-5 text-rk-slate">
                                    {{ $r->actor?->name ?? '—' }}
                                    <div class="text-xs text-rk-slate">
                                        {{ $r->actor?->email ?? ($r->actor_user_id ? 'user#' . $r->actor_user_id : '') }}
                                    </div>
                                </td>

                                <td class="py-4 px-5 text-rk-slate">
                                    {{ $r->station?->name ?? '—' }}
                                </td>

                                <td class="py-4 px-5 text-rk-slate whitespace-nowrap">
                                    {{ $r->ip_address ?? '—' }}
                                </td>

                                <td class="py-4 px-5 text-xs text-rk-slate">
                                    {{ $uaStr !== '' ? Str::limit($uaStr, 60) : '—' }}
                                </td>

                                <td class="py-4 px-5 text-rk-slate whitespace-nowrap">
                                    <div class="font-medium">{{ class_basename($r->subject_type ?? '') ?: '—' }}</div>
                                    <div class="text-xs text-rk-slate">#{{ $r->subject_id ?? '—' }}</div>
                                </td>

                                <td class="py-4 px-5 text-xs text-rk-slate">
                                    {{ $metaPreview }}
                                </td>
                                <td class="py-4 px-6 text-right">
                                    <a href="{{ route('security.audit.show', $r) }}"
                                        class="inline-flex items-center justify-center h-10 w-10 rounded-2xl border border-rk bg-white hover:bg-neutral-50 transition-rk"
                                        title="Öffnen" aria-label="Öffnen">
                                        <svg xmlns="http://www.w3.org/2000/svg" width="20" height="20"
                                            viewBox="0 0 24 24" fill="none" stroke="currentColor"
                                            stroke-width="2" stroke-linecap="round" stroke-linejoin="round"
                                            aria-hidden="true" class="text-rk-green">
                                            <path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7z" />
                                            <circle cx="12" cy="12" r="3" />
                                        </svg>
                                    </a>
                                </td>
                            </tr>
                        @empty
                            <tr>
                                <td colspan="10" class="py-10 px-5 text-center text-rk-slate">Keine Einträge.</td>
                            </tr>
                        @endforelse
                    </tbody>
                </table>
            </div>

            <div class="px-5 py-4 border-t border-rk bg-white">
                {{ $logs->links() }}
            </div>
        </div>

    </div>
</x-layouts.app>