@extends('layouts.dashboard')
@section('title', __('Security & Backups'))
@section('page_title', __('Security & Backups'))

@section('content')
    @include('partials.how-it-works', ['key' => 'admin.security'])

    <div class="row g-3 mb-4">
        <div class="col-sm-6 col-xl-3">@include('partials.dashboard.stat-card', ['label' => __('Admins with 2FA'), 'value' => $stats['admins_2fa'] . ' / ' . $stats['admins'], 'icon' => 'bi-shield-lock', 'color' => $stats['admins_2fa'] === $stats['admins'] && $stats['admins'] ? 'success' : 'warning'])</div>
        <div class="col-sm-6 col-xl-3">@include('partials.dashboard.stat-card', ['label' => __('Users with 2FA'), 'value' => $stats['users_2fa'], 'icon' => 'bi-people', 'color' => 'primary'])</div>
        <div class="col-sm-6 col-xl-3">@include('partials.dashboard.stat-card', ['label' => __('Backups stored'), 'value' => $stats['backups'], 'icon' => 'bi-hdd-stack', 'color' => 'info', 'hint' => round($stats['backup_bytes'] / 1048576, 1) . ' MB'])</div>
        <div class="col-sm-6 col-xl-3">@include('partials.dashboard.stat-card', ['label' => __('GDPR requests'), 'value' => $stats['exports'] + $stats['erasures'], 'icon' => 'bi-file-earmark-person', 'color' => 'secondary', 'hint' => $stats['exports'] . ' ' . __('exports') . ' · ' . $stats['erasures'] . ' ' . __('erasures')])</div>
    </div>

    <div class="row g-3">
        <div class="col-xl-5">
            <form action="{{ route('admin.security.update') }}" method="POST" class="card mb-3">@csrf @method('PUT')
                <div class="card-header"><i class="bi bi-sliders text-primary me-2"></i>{{ __('Security policy') }}</div>
                <div class="card-body d-grid gap-3">
                    <div class="form-check form-switch">
                        <input class="form-check-input" type="checkbox" role="switch" name="force_2fa_admins" value="1" id="f2fa" {{ ($settings['force_2fa_admins'] ?? '0') === '1' ? 'checked' : '' }}>
                        <label class="form-check-label fw-semibold" for="f2fa">{{ __('Require two-factor authentication for admins & owners') }}</label>
                        <div class="form-text">{{ __('Admins without 2FA are redirected to the setup page until they enable it.') }}</div>
                    </div>
                    <div class="form-check form-switch">
                        <input class="form-check-input" type="checkbox" role="switch" name="show_demo_credentials" value="1" id="fdemo" {{ ($settings['show_demo_credentials'] ?? '1') !== '0' ? 'checked' : '' }}>
                        <label class="form-check-label fw-semibold" for="fdemo">{{ __('Show demo account chips on the login page') }}</label>
                        <div class="form-text">{{ __('Automatically hidden when APP_ENV=production.') }}</div>
                    </div>
                    <div class="row g-3">
                        <div class="col-6">
                            <label class="form-label">{{ __('Login attempts / minute') }}</label>
                            <input type="number" name="login_throttle_attempts" class="form-control" min="3" max="50" value="{{ $settings['login_throttle_attempts'] ?? 5 }}">
                            <div class="form-text">{{ __('Per email + IP, on login, 2FA and API login.') }}</div>
                        </div>
                        <div class="col-6">
                            <label class="form-label">{{ __('Session lifetime (minutes)') }}</label>
                            <input type="number" name="session_lifetime_minutes" class="form-control" min="15" max="43200" value="{{ $settings['session_lifetime_minutes'] ?? config('session.lifetime', 120) }}">
                        </div>
                        <div class="col-6">
                            <label class="form-label">{{ __('Max active sessions per account') }}</label>
                            <input type="number" name="max_active_sessions" class="form-control" min="0" max="20" value="{{ $settings['max_active_sessions'] ?? 0 }}">
                            <div class="form-text">{{ __('0 = unlimited. When exceeded, the oldest sessions are signed out first.') }}</div>
                        </div>
                    </div>
                    <hr class="my-1">
                    <div class="row g-3">
                        <div class="col-6">
                            <label class="form-label">{{ __('Automatic backups') }}</label>
                            <select name="backup_schedule" class="form-select">
                                @foreach(['off' => __('Off'), 'daily' => __('Daily (03:00)'), 'weekly' => __('Weekly (Sunday 03:00)')] as $k => $l)<option value="{{ $k }}" @selected(($settings['backup_schedule'] ?? 'off') === $k)>{{ $l }}</option>@endforeach
                            </select>
                        </div>
                        <div class="col-6">
                            <label class="form-label">{{ __('Keep last N backups') }}</label>
                            <input type="number" name="backup_keep" class="form-control" min="1" max="60" value="{{ $settings['backup_keep'] ?? 7 }}">
                        </div>
                    </div>
                    <div class="form-check form-switch">
                        <input class="form-check-input" type="checkbox" role="switch" name="backup_include_files" value="1" id="ffiles" {{ ($settings['backup_include_files'] ?? '0') === '1' ? 'checked' : '' }} {{ $zipAvailable ? '' : 'disabled' }}>
                        <label class="form-check-label fw-semibold" for="ffiles">{{ __('Include uploaded files in scheduled backups (zip)') }}</label>
                        @unless($zipAvailable)<div class="form-text text-danger">{{ __('PHP zip extension not available.') }}</div>@endunless
                    </div>
                    <div class="form-text"><i class="bi bi-info-circle me-1"></i>{{ __('Scheduled backups need the cron entry') }} <code>* * * * * php artisan schedule:run</code>.</div>
                </div>
                <div class="card-footer text-end"><button class="btn btn-primary"><i class="bi bi-check2 me-1"></i>{{ __('Save policy') }}</button></div>
            </form>

            <div class="card">
                <div class="card-header"><i class="bi bi-file-earmark-person text-primary me-2"></i>{{ __('Recent GDPR requests') }}</div>
                <div class="list-group list-group-flush">
                    @forelse($requests as $r)
                        <div class="list-group-item d-flex justify-content-between align-items-center">
                            <div class="small"><span class="badge {{ $r->type === 'erase' ? 'bg-danger' : 'bg-info' }} me-2">{{ status_label($r->type) }}</span>{{ $r->user->name ?? '—' }} <span class="text-muted">({{ $r->user->email ?? '' }})</span></div>
                            <span class="text-muted small">{{ $r->created_at->diffForHumans() }}</span>
                        </div>
                    @empty
                        <div class="lf-empty"><i class="bi bi-file-earmark-person"></i>{{ __('No data requests yet.') }}</div>
                    @endforelse
                </div>
            </div>
        </div>

        <div class="col-xl-7">
            <div class="card mb-3">
                <div class="card-header d-flex justify-content-between align-items-center flex-wrap gap-2">
                    <span><i class="bi bi-hdd-stack text-primary me-2"></i>{{ __('Backups') }} <span class="text-muted small fw-normal ms-1">{{ $backupDir }}</span></span>
                    <div class="d-flex gap-2">
                        <form action="{{ route('admin.security.backups.create') }}" method="POST">@csrf<input type="hidden" name="type" value="db"><button class="btn btn-sm btn-primary"><i class="bi bi-database-add me-1"></i>{{ __('Backup database') }}</button></form>
                        @if($zipAvailable)<form action="{{ route('admin.security.backups.create') }}" method="POST">@csrf<input type="hidden" name="type" value="full"><button class="btn btn-sm btn-light"><i class="bi bi-file-zip me-1"></i>{{ __('Full backup') }}</button></form>@endif
                    </div>
                </div>
                <div class="table-responsive">
                    <table class="table table-hover align-middle mb-0">
                        <thead><tr><th>{{ __('File') }}</th><th>{{ __('Type') }}</th><th>{{ __('Size') }}</th><th>{{ __('Created') }}</th><th>{{ __('Status') }}</th><th class="text-end">{{ __('Actions') }}</th></tr></thead>
                        <tbody>
                            @forelse($backupsList as $b)
                                <tr>
                                    <td class="font-monospace small">{{ $b->filename }}</td>
                                    <td><span class="badge bg-light">{{ strtoupper($b->type) }}</span></td>
                                    <td>{{ $b->humanSize() }}</td>
                                    <td class="small text-muted" title="{{ $b->created_at }}">{{ $b->created_at->diffForHumans() }}<br>{{ $b->creator->name ?? __('Scheduler') }}</td>
                                    <td><span class="badge bg-{{ $b->status === 'completed' ? 'success' : ($b->status === 'failed' ? 'danger' : 'warning') }}" title="{{ $b->error }}">{{ status_label($b->status) }}</span></td>
                                    <td class="text-end text-nowrap">
                                        @if($b->status === 'completed' && $b->exists())<a href="{{ route('admin.security.backups.download', $b) }}" class="btn btn-sm btn-light"><i class="bi bi-download"></i></a>@endif
                                        <form action="{{ route('admin.security.backups.destroy', $b) }}" method="POST" class="d-inline" data-confirm="{{ __('Delete this backup?') }}">@csrf @method('DELETE')<button class="btn btn-sm btn-light text-danger"><i class="bi bi-trash"></i></button></form>
                                    </td>
                                </tr>
                            @empty
                                <tr><td colspan="6"><div class="lf-empty"><i class="bi bi-hdd"></i>{{ __('No backups yet. Create one now or schedule them in the policy.') }}</div></td></tr>
                            @endforelse
                        </tbody>
                    </table>
                </div>
            </div>

            <div class="card">
                <div class="card-header d-flex justify-content-between align-items-center"><span><i class="bi bi-clock-history text-primary me-2"></i>{{ __('Recent sign-ins (all users)') }}</span><a href="{{ route('admin.audit.index') }}" class="small fw-semibold">{{ __('Audit trail') }}</a></div>
                <div class="table-responsive">
                    <table class="table table-hover align-middle mb-0">
                        <thead><tr><th>{{ __('User') }}</th><th>{{ __('When') }}</th><th>{{ __('Device') }}</th><th>{{ __('IP') }}</th><th>{{ __('2FA') }}</th><th></th></tr></thead>
                        <tbody>
                            @forelse($recentLogins as $l)
                                <tr>
                                    <td><div class="d-flex align-items-center gap-2">@if($l->user)<img src="{{ $l->user->avatarUrl() }}" class="lf-avatar-sm" alt="">@endif<div class="small"><div class="fw-semibold">{{ $l->user->name ?? '—' }}</div><div class="text-muted">{{ $l->user->email ?? '' }}</div></div></div></td>
                                    <td class="small">{{ optional($l->logged_in_at)->diffForHumans() }}</td>
                                    <td class="small">{{ $l->device ? __($l->device) : '—' }}</td>
                                    <td class="font-monospace small">{{ $l->ip_address }}</td>
                                    <td>@if($l->user?->hasTwoFactor())<span class="badge bg-success">{{ __('On') }}</span>@else<span class="badge bg-secondary">{{ __('Off') }}</span>@endif</td>
                                    <td class="text-end">@if($l->user?->hasTwoFactor())<form action="{{ route('admin.security.users.reset-2fa', $l->user) }}" method="POST" data-confirm="{{ __('Reset 2FA for this user? They will be able to sign in with just their password.') }}">@csrf<button class="btn btn-sm btn-light" title="{{ __('Reset 2FA') }}"><i class="bi bi-shield-x"></i></button></form>@endif</td>
                                </tr>
                            @empty
                                <tr><td colspan="6"><div class="lf-empty"><i class="bi bi-clock-history"></i>{{ __('No sign-ins yet.') }}</div></td></tr>
                            @endforelse
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>
@endsection