@extends('layouts.app')
@section('title', 'T-Pin Settings')

@push('stylesheets')
    @include('admin-controls.partials.settings-styles')
    <style>
        .twofa-toggle-wrapper {
            display: flex;
            align-items: center;
            gap: 1rem;
            padding: 1rem 1.25rem;
            background: #f8f9fa;
            border-radius: 0.5rem;
            border: 1px solid #e9ecef;
        }
        .dark-mode .twofa-toggle-wrapper {
            background: rgba(0, 0, 0, 0.15);
            border-color: rgba(255, 255, 255, 0.08);
        }
        .twofa-toggle-label { flex: 1; }
        .twofa-toggle-label h5 {
            margin: 0 0 0.15rem;
            font-size: 0.9rem;
            font-weight: 600;
            color: #343a40;
        }
        .dark-mode .twofa-toggle-label h5 { color: #f8f9fa; }
        .twofa-toggle-label p {
            margin: 0;
            font-size: 0.8rem;
            color: #6c757d;
        }
        .dark-mode .twofa-toggle-label p { color: #adb5bd; }
    </style>
@endpush

@section('contents')
<x-layouts.page-wrapper
    title="T-Pin Settings"
    :breadcrumbs="[
        'Admin Controls' => null,
        'T-Pin Settings' => null,
    ]"
>
    <div class="col-12 col-xl-10 mx-auto">
        <x-admin-controls.settings-form
            :action="route('admin-controls.t-pin-settings.update')"
            method="PUT"
            :backRoute="route('dashboard')"
            guideText="Control the shared 4-digit T-Pin used for login (when enabled) and for signature actions (Draw / Upload / Use on file). Changes are logged."
        >
            <x-admin-controls.settings-section icon="fas fa-key" title="Login">
                <div class="twofa-toggle-wrapper mb-3">
                    <div class="twofa-toggle-label">
                        <h5>T-Pin for Login</h5>
                        <p>When enabled, users must enter their T-Pin with their password. Users without a T-Pin are forced to create one after login, then logged out.</p>
                    </div>
                    <div class="custom-control custom-switch">
                        <input type="hidden" name="login_enabled" value="0">
                        <input type="checkbox" class="custom-control-input" id="login_enabled" name="login_enabled" value="1"
                            {{ old('login_enabled', $settings->login_enabled) ? 'checked' : '' }}>
                        <label class="custom-control-label" for="login_enabled"></label>
                    </div>
                </div>
            </x-admin-controls.settings-section>

            <x-admin-controls.settings-section icon="fas fa-signature" title="Signature">
                <div class="twofa-toggle-wrapper mb-3">
                    <div class="twofa-toggle-label">
                        <h5>T-Pin for Signature</h5>
                        <p>When enabled, Draw / Upload / Use on file require a valid T-Pin on every signature action. Does not replace password or 2FA.</p>
                    </div>
                    <div class="custom-control custom-switch">
                        <input type="hidden" name="signature_enabled" value="0">
                        <input type="checkbox" class="custom-control-input" id="signature_enabled" name="signature_enabled" value="1"
                            {{ old('signature_enabled', $settings->signature_enabled) ? 'checked' : '' }}>
                        <label class="custom-control-label" for="signature_enabled"></label>
                    </div>
                </div>
            </x-admin-controls.settings-section>

            <x-admin-controls.settings-section icon="fas fa-calendar-alt" title="Expiry">
                <div class="form-group mb-0">
                    <label for="expiry_days">T-Pin expiry (days)</label>
                    <input type="number" min="1" max="3650" class="form-control" id="expiry_days" name="expiry_days"
                           value="{{ old('expiry_days', $settings->expiry_days) }}" required>
                    <small class="form-text text-muted">Default 90. After expiry, users must renew before login (if login T-Pin is on) or before signing (if signature T-Pin is on).</small>
                </div>
            </x-admin-controls.settings-section>

            @if(($logs ?? collect())->isNotEmpty())
            <x-admin-controls.settings-section icon="fas fa-history" title="Recent setting changes">
                <div class="table-responsive">
                    <table class="table table-sm table-striped mb-0">
                        <thead>
                            <tr>
                                <th>When</th>
                                <th>Actor</th>
                                <th>Event</th>
                                <th>Details</th>
                            </tr>
                        </thead>
                        <tbody>
                            @foreach ($logs as $log)
                                <tr>
                                    <td>{{ $log->created_at?->format('Y-m-d H:i') }}</td>
                                    <td>{{ $log->actor?->name ?? ('#'.$log->actor_user_id) }}</td>
                                    <td>{{ $log->event }}</td>
                                    <td class="small text-muted">
                                        @if(is_array($log->meta))
                                            {{ \Illuminate\Support\Str::limit(json_encode($log->meta), 120) }}
                                        @endif
                                    </td>
                                </tr>
                            @endforeach
                        </tbody>
                    </table>
                </div>
            </x-admin-controls.settings-section>
            @endif
        </x-admin-controls.settings-form>
    </div>
</x-layouts.page-wrapper>
@endsection