@extends('layouts.dashboard')
@section('title', __('Settings'))
@section('page_title', __('Settings'))

@php
    $labels = [
        'site_name' => 'Site Name',
        'site_tagline' => 'Site Tagline',
        'site_logo' => 'Logo (light mode)',
        'site_logo_dark' => 'Logo (dark mode)',
        'site_favicon' => 'Favicon',
        'footer_text' => 'Footer Text',
        'default_language' => 'Default Language',
        'site_email' => 'Contact Email',
        'site_phone' => 'Contact Phone',
        'invoice_address' => 'Invoice: business address (printed on invoices)',
        'invoice_tax_id' => 'Invoice: tax / VAT number',
        'invoice_footer' => 'Invoice: footer note',
        'currency' => 'Currency Code',
        'currency_symbol' => 'Currency Symbol',
        'admin_commission' => 'Admin Commission (%) — platform share of each sale; instructors and courses can override',
        'instructor_own_sale_share' => "Instructor's own-referral sales: instructor share (%) when the buyer signed up through the instructor's affiliate link. Blank = same as other sales",
        'instructor_signup_enabled' => 'Marketplace mode — let visitors sign up or apply as instructors. Off = single-academy: only admins add instructors',
        'instructor_approval_enabled' => 'Instructor applications need admin approval before they can create courses',
        'refund_window_days' => 'Refund window (days after purchase)',
        'prepurchase_ask_enabled' => 'Course page: let visitors ask the instructor a question before buying (default On)',
        'review_moderation_enabled' => 'Reviews: hold new course reviews until an admin approves them',
        'manual_payment_instructions' => 'Offline payment: instructions shown at checkout (bank name, account number, mobile-wallet number…)',
        'manual_payment_receipt_required_enabled' => 'Offline payment: buyer must upload a receipt (the transaction id is always required)',
        'wallet_withdraw_enabled' => 'Allow learners to withdraw their balance',
        'wallet_withdraw_hold_days' => 'Hold refunded credit before it can be withdrawn (days)',
        'wallet_min_withdrawal' => 'Minimum withdrawal amount',
        'invite_inviter_bonus' => 'Invite-a-friend: credit for the inviter (0 = off)',
        'invite_invitee_bonus' => 'Invite-a-friend: credit for the new friend (0 = off)',
        'loyalty_points_per_credit' => 'Loyalty: points needed for 1 balance credit (0 = redeem off)',
        'loyalty_min_redeem_points' => 'Loyalty: minimum points per redemption',
        'facebook_url' => 'Facebook URL',
        'twitter_url' => 'Twitter URL',
        'youtube_api_key' => 'YouTube Data API key (lets instructors import a whole playlist with lengths — optional)',
        'bunny_library_id' => 'Bunny Stream Library ID',
        'cloudflare_stream_customer' => 'Cloudflare Stream customer code (customer-XXXX)',
        'video_signed_ttl_minutes' => 'Protected video link lifetime (minutes)',
        'drm_widevine_license_url' => 'Widevine license URL',
        'drm_fairplay_license_url' => 'FairPlay license URL',
        'similarity_provider_url' => 'Similarity provider URL',
        'similarity_provider_key' => 'Similarity provider API key',
        'similarity_provider_timeout' => 'Similarity provider timeout (seconds)',
        'proctoring_provider_url' => 'Proctoring provider URL',
        'proctoring_provider_key' => 'Proctoring provider API key',
        'proctoring_provider_timeout' => 'Proctoring provider timeout (seconds)',
        'video_watermark_enabled' => 'Show a watermark over lesson video (1 = on, 0 = off)',
        'video_watermark_text' => 'Watermark text — {name} {email} {id} {ip} {date}',
        'video_watermark_opacity' => 'Watermark opacity (0.03 – 0.6)',
        'video_watermark_interval' => 'Move the watermark every N seconds',
        'live_room_domain' => 'Classroom server domain (default meet.jit.si)',
        'live_room_app_id' => 'Classroom app ID (self-hosted, optional)',
        'live_room_app_secret' => 'Classroom app secret (self-hosted, optional)',
        'live_reminder_minutes' => 'Live class reminder — minutes before start (default 60)',
        'zoom_account_id' => 'Zoom: Account ID (Server-to-Server OAuth app)',
        'zoom_client_id' => 'Zoom: Client ID',
        'zoom_client_secret' => 'Zoom: Client Secret',
        'zoom_host_email' => 'Zoom: host user e-mail (empty = the app owner)',
        'zoom_auto_record' => 'Zoom: auto-record meetings (none / local / cloud)',
        'live_room_open_minutes' => 'Open the room N minutes before the start',
        'staff_learner_menu' => 'Learner menu for instructors and admins',
        'auth_headline' => 'Headline beside the form',
        'auth_subtext' => 'Supporting text',
        'auth_features' => 'Highlights',
        'auth_quote_min_rating' => 'Only show testimonials rated at least',
        'order_bump_enabled' => 'Offer an extra course at checkout',
        'order_bump_discount' => 'Order-bump discount (%)',
        'installment_grace_days' => 'Days of grace before an overdue instalment pauses access',
        'ga4_measurement_id' => 'Google Analytics 4 measurement ID (G-…)',
        'meta_pixel_id' => 'Meta (Facebook) pixel ID',
        'meta_capi_token' => 'Meta Conversions API access token (sends each paid order from the server too — leave blank to use the browser pixel only)',
        'meta_capi_test_code' => 'Meta Conversions API test event code (optional, for Events Manager → Test events)',
        'tiktok_pixel_id' => 'TikTok pixel ID',
        'custom_head_code' => 'Custom <head> code — verification tags, chat widgets, extra <script>/<link> (survives updates)',
        'custom_css' => 'Custom CSS — appended after the theme stylesheet on every public page',
        'custom_body_code' => 'Custom code before </body> — pixels, live-chat, any script',
        'sso_google_enabled' => 'Google sign-in',
        'sso_google_client_id' => 'Google client ID',
        'sso_google_client_secret' => 'Google client secret',
        'sso_microsoft_enabled' => 'Microsoft sign-in',
        'sso_microsoft_client_id' => 'Microsoft client ID',
        'sso_microsoft_client_secret' => 'Microsoft client secret',
        'sso_facebook_enabled' => 'Facebook sign-in',
        'sso_facebook_client_id' => 'Facebook app ID',
        'sso_facebook_client_secret' => 'Facebook app secret',
        'sso_github_enabled' => 'GitHub sign-in',
        'sso_github_client_id' => 'GitHub client ID',
        'sso_github_client_secret' => 'GitHub client secret',
        'saml_enabled' => 'SAML single sign-on',
        'saml_label' => 'Button label (e.g. “Sign in with Okta”)',
        'saml_idp_entity_id' => 'IdP entity ID',
        'saml_idp_sso_url' => 'IdP sign-in URL',
        'saml_idp_slo_url' => 'IdP sign-out URL (optional)',
        'saml_idp_x509' => 'IdP signing certificate (x509)',
        'saml_sp_entity_id' => 'Our entity ID (blank = metadata URL)',
        'saml_sp_x509' => 'Our certificate (optional, for signed requests)',
        'saml_sp_private_key' => 'Our private key (optional, for signed requests)',
        'saml_attr_email' => 'Email attribute name (optional override)',
        'saml_attr_name' => 'Full-name attribute (optional override)',
        'saml_attr_first_name' => 'First-name attribute (optional override)',
        'saml_attr_last_name' => 'Last-name attribute (optional override)',
        'saml_default_role' => 'Role for new SAML users (default: student)',
        'asr_driver' => 'Speech-to-text provider',
        'asr_api_key' => 'Provider API key',
        'asr_model' => 'Model (Whisper only — default whisper-1)',
        'asr_timeout' => 'Timeout in seconds (default 900)',
        'ldap_enabled' => 'LDAP / Active Directory sign-in',
        'ldap_label' => 'Button label shown to users',
        'ldap_host' => 'Server host (comma-separate for failover)',
        'ldap_port' => 'Port (389 plain/TLS, 636 SSL)',
        'ldap_encryption' => 'Encryption',
        'ldap_base_dn' => 'Base DN (e.g. dc=example,dc=com)',
        'ldap_bind_dn' => 'Service account DN',
        'ldap_bind_password' => 'Service account password',
        'google_calendar_client_id' => 'Google: OAuth client ID',
        'google_calendar_client_secret' => 'Google: OAuth client secret',
        'microsoft_calendar_client_id' => 'Microsoft: application (client) ID',
        'microsoft_calendar_client_secret' => 'Microsoft: client secret',
        'lti_platform_issuer' => 'Platform issuer URL',
        'lti_client_id' => 'Client ID (issued by the platform)',
        'lti_authorization_endpoint' => 'Platform OIDC authorization endpoint',
        'lti_platform_jwks_url' => 'Platform JWKS URL',
        'lti_private_key' => 'Our RS256 private key (PEM) — signs the launch JWT',
        'lti_key_id' => 'Key ID (kid) — must match the public key you gave the platform',
        'scim_bearer_token' => 'Bearer token — paste the same value into your identity provider',
        'ldap_attr_username' => 'Username attribute (default samaccountname)',
        'ldap_attr_email' => 'Email attribute (default mail)',
        'ldap_attr_name' => 'Display-name attribute (default displayname)',
        'ldap_email_domain' => 'Fallback email domain when the directory has none',
        'ldap_default_role' => 'Role for new LDAP users (default: student)',
    ];
    $tabs = [
        'general' => ['title' => 'General', 'icon' => 'bi-gear'],
        'appearance' => ['title' => 'Appearance', 'icon' => 'bi-palette'],
        'contact' => ['title' => 'Contact', 'icon' => 'bi-telephone'],
        'commerce' => ['title' => 'Commerce', 'icon' => 'bi-cash-coin'],
        'social' => ['title' => 'Social', 'icon' => 'bi-share'],
        'media' => ['title' => 'Video & Media', 'icon' => 'bi-play-btn'],
        'drm' => ['title' => 'DRM video', 'icon' => 'bi-shield-lock'],
        'integrity' => ['title' => 'Academic integrity', 'icon' => 'bi-person-check'],
        'protection' => ['title' => 'Video protection', 'icon' => 'bi-shield-lock'],
        'liveroom' => ['title' => 'Live classroom', 'icon' => 'bi-camera-video'],
        'panel' => ['title' => 'Panel', 'icon' => 'bi-layout-sidebar'],
        'auth' => ['title' => 'Login screen', 'icon' => 'bi-box-arrow-in-right'],
        'growth' => ['title' => 'Growth', 'icon' => 'bi-rocket-takeoff'],
        'analytics' => ['title' => 'Analytics & pixels', 'icon' => 'bi-graph-up-arrow'],
        'sso' => ['title' => 'Single sign-on', 'icon' => 'bi-key'],
        'saml' => ['title' => 'SAML 2.0', 'icon' => 'bi-shield-check'],
        'transcription' => ['title' => 'Transcription', 'icon' => 'bi-badge-cc'],
        'ldap' => ['title' => 'LDAP / AD', 'icon' => 'bi-diagram-3'],
        'calendar' => ['title' => 'Calendar sync', 'icon' => 'bi-calendar-check'],
        'lti' => ['title' => 'LTI 1.3', 'icon' => 'bi-plug'],
        'scim' => ['title' => 'SCIM provisioning', 'icon' => 'bi-people'],
    ];
@endphp

@section('content')
    <div class="d-flex justify-content-between align-items-center mb-3">
        <h5 class="mb-0">{{ __('Site Settings') }}</h5>
    </div>

    <form action="{{ route('admin.settings.update') }}" method="POST" enctype="multipart/form-data">
        @csrf
        @method('PUT')
        <div class="card shadow-sm">
            <div class="card-header bg-white">
                <ul class="nav nav-tabs card-header-tabs" role="tablist">
                    @foreach($tabs as $key => $tab)
                        <li class="nav-item" role="presentation">
                            <button class="nav-link @if($loop->first) active @endif" data-bs-toggle="tab" data-bs-target="#tab-{{ $key }}" type="button" role="tab">
                                <i class="bi {{ $tab['icon'] }} me-1"></i> {{ __($tab['title']) }}
                            </button>
                        </li>
                    @endforeach
                </ul>
            </div>
            <div class="card-body">
                <div class="tab-content">
                    @foreach($groups as $group => $keys)
                        <div class="tab-pane fade @if($loop->first) show active @endif" id="tab-{{ $group }}" role="tabpanel">
                            @if($group === 'transcription')
                                <div class="alert alert-info small">
                                    {{ __('Generates the first subtitle track from a lesson’s own audio. The academy supplies its own provider key, so transcription is billed to you and never to the platform.') }}
                                    <br>{{ __('Whisper accepts files up to 25 MB; Deepgram and AssemblyAI handle full-length lessons and can fetch a direct media URL themselves.') }}
                                    <br>{{ __('Transcription runs on the queue, so a queue worker must be running.') }}
                                </div>
                            @endif
                            @if($group === 'auth')
                                <div class="alert alert-info small">
                                    {{ __('This is the panel shown beside the login, register and password forms. The quote underneath is pulled from Testimonials — add or edit those in Admin → Testimonials.') }}
                                </div>
                            @endif
                            @if($group === 'ldap')
                                @unless(\App\Support\Sso\LdapDirectory::driverAvailable())
                                    <div class="alert alert-warning small">
                                        <i class="bi bi-exclamation-triangle me-1"></i>
                                        {{ __('PHP is missing the ldap extension, so directory sign-in cannot run on this server. Ask your host to enable php-ldap.') }}
                                    </div>
                                @endunless
                                <div class="alert alert-info small">
                                    {{ __('Users sign in on the normal login form with their directory username or email. A local account is created on first sign-in; the directory keeps the password.') }}
                                </div>
                            @endif
                            @if($group === 'drm')
                                <div class="alert alert-info small">
                                    <h6 class="alert-heading"><i class="bi bi-question-circle me-1"></i>{{ __('How DRM video protection works') }}</h6>
                                    <p class="mb-2">{{ __('DRM encrypts video so supported browsers and devices can play it only after the provider approves a license request. Learnify never receives or stores the video decryption keys.') }}</p>
                                    <ol class="mb-2 ps-3">
                                        <li>{{ __('Create a Widevine/FairPlay DRM service and package your videos as encrypted HLS or DASH.') }}</li>
                                        <li>{{ __('Copy the provider’s Widevine and/or FairPlay license URL into the matching field below.') }}</li>
                                        <li>{{ __('Update each lesson to use its encrypted manifest URL, then test playback on Chrome/Android and Safari/iOS.') }}</li>
                                    </ol>
                                    <p class="mb-0">{{ __('Leave both fields blank to keep the normal HLS/native player. These settings override environment defaults when filled.') }}</p>
                                </div>
                            @endif
                            @if($group === 'integrity')
                                <div class="alert alert-info small">
                                    <h6 class="alert-heading"><i class="bi bi-question-circle me-1"></i>{{ __('How similarity and proctoring providers work') }}</h6>
                                    <p class="mb-0">{{ __('These optional endpoints receive assignment text or quiz snapshots and return the documented Learnify score/analysis fields. Leave a provider URL blank to keep the built-in comparison or snapshot-only fallback. Provider accounts, privacy agreements, and endpoint implementation are external deployment work.') }}</p>
                                </div>
                            @endif
                            @if($group === 'saml')
                                {{-- Hand these three to whoever administers the identity provider. --}}
                                <div class="alert alert-info small">
                                    <div><strong>{{ __('Metadata URL') }}:</strong> <code>{{ route('saml.metadata') }}</code></div>
                                    <div><strong>{{ __('ACS / reply URL') }}:</strong> <code>{{ route('saml.acs') }}</code></div>
                                    <div><strong>{{ __('Sign-out URL') }}:</strong> <code>{{ route('saml.sls') }}</code></div>
                                </div>
                            @endif
                            @if($group === 'appearance')
                                @include('admin.settings.appearance')
                            @else
                            <div class="row g-3">
                                @foreach($keys as $key)
                                    <div class="{{ in_array($key, ['auth_subtext', 'auth_features'], true) ? 'col-12' : (in_array($key, ['site_logo', 'site_logo_dark', 'site_favicon'], true) ? 'col-md-4' : 'col-md-6') }}">
                                        <label class="form-label">{{ __($labels[$key] ?? \Illuminate\Support\Str::headline($key)) }}</label>
                                        @if($key === 'auth_subtext')
                                            <textarea name="{{ $key }}" rows="2" class="form-control" placeholder="{{ __('Join learners around the world. Video lessons, quizzes, live classes, certificates — everything in one place.') }}">{{ old($key, $settings[$key]) }}</textarea>
                                            <div class="form-text">{{ __('Leave blank to use the built-in wording.') }}</div>
                                        @elseif($key === 'auth_quote_min_rating')
                                            <select name="{{ $key }}" class="form-select">
                                                @foreach([0 => __('Any rating'), 3 => __('3 stars and up'), 4 => __('4 stars and up'), 5 => __('5 stars only')] as $val => $label)
                                                    <option value="{{ $val }}" @selected((int) old($key, $settings[$key] ?? 4) === $val)>{{ $label }}</option>
                                                @endforeach
                                            </select>
                                            <div class="form-text">{{ __('A weak review is the last thing a visitor should read while signing up.') }}</div>
                                        @elseif($key === 'auth_features')
                                            <div class="lf-auth-rows d-grid gap-2" id="authFeatures">
                                                {{-- Pre-fill with the English source text (not the admin's UI language), so saving never stores a translation. --}}
                                                @php($lfAuthLocale = app()->getLocale())
                                                @php(app()->setLocale('en'))
                                                @php($lfAuthRows = auth_features())
                                                @php(app()->setLocale($lfAuthLocale))
                                                @foreach($lfAuthRows as $i => $row)
                                                    <div class="lf-auth-row border rounded-3 p-2 d-flex gap-2 align-items-start flex-wrap">
                                                        <div style="width:170px">
                                                            <label class="form-label small mb-1">{{ __('Icon') }}</label>
                                                            <input type="text" name="auth_features[{{ $i }}][icon]" value="{{ $row['icon'] }}" class="form-control form-control-sm" placeholder="bi-award">
                                                        </div>
                                                        <div style="width:220px">
                                                            <label class="form-label small mb-1">{{ __('Title') }}</label>
                                                            <input type="text" name="auth_features[{{ $i }}][title]" value="{{ $row['title'] }}" class="form-control form-control-sm">
                                                        </div>
                                                        <div class="flex-grow-1" style="min-width:220px">
                                                            <label class="form-label small mb-1">{{ __('Text') }}</label>
                                                            <input type="text" name="auth_features[{{ $i }}][text]" value="{{ $row['text'] }}" class="form-control form-control-sm">
                                                        </div>
                                                        <button type="button" class="btn btn-sm btn-light text-danger lf-auth-del mt-4" title="{{ __('Remove') }}"><i class="bi bi-trash"></i></button>
                                                    </div>
                                                @endforeach
                                            </div>
                                            <button type="button" class="btn btn-sm btn-light mt-2" id="authFeatureAdd"><i class="bi bi-plus-lg me-1"></i>{{ __('Add highlight') }}</button>
                                            <div class="form-text">{{ __('Icons use Bootstrap Icons class names, e.g. bi-award. Remove every row to fall back to the built-in three.') }}</div>
                                        @elseif($key === 'staff_learner_menu')
                                            <select name="{{ $key }}" class="form-select">
                                                @foreach([
                                                    'auto' => __('Automatic — hide entries a staff account would find empty'),
                                                    'always' => __('Always show the full learner menu'),
                                                    'never' => __('Never show the learner menu to staff'),
                                                ] as $val => $label)
                                                    <option value="{{ $val }}" @selected(old($key, $settings[$key] ?: 'auto') === $val)>{{ $label }}</option>
                                                @endforeach
                                            </select>
                                            <div class="form-text">{{ __('Instructors can take courses too, so the menu is kept — but on “Automatic” the buying and gamification entries only appear once they have enrolled in something.') }}</div>
                                        @elseif($key === 'asr_driver')
                                            <select name="{{ $key }}" class="form-select">
                                                <option value="off" @selected(! old($key, $settings[$key]) || old($key, $settings[$key]) === 'off')>{{ __('Off') }}</option>
                                                @foreach(\App\Support\Transcription\TranscriptionService::DRIVERS as $val => $label)
                                                    <option value="{{ $val }}" @selected(old($key, $settings[$key]) === $val)>{{ $label }}</option>
                                                @endforeach
                                            </select>
                                        @elseif(in_array($key, ['asr_api_key', 'similarity_provider_key', 'proctoring_provider_key', 'meta_capi_token', 'youtube_api_key', 'zoom_client_secret', 'live_room_app_secret', 'google_calendar_client_secret', 'microsoft_calendar_client_secret', 'scim_bearer_token'], true))
                                            <input type="password" name="{{ $key }}" value="{{ old($key, $settings[$key]) }}" class="form-control font-monospace" autocomplete="new-password">
                                        @elseif($key === 'zoom_auto_record')
                                            <select name="{{ $key }}" class="form-select">
                                                @foreach(['none' => __('Off'), 'local' => __('Local (host computer)'), 'cloud' => __('Cloud (paid Zoom plans)')] as $val => $label)
                                                    <option value="{{ $val }}" @selected(old($key, $settings[$key] ?: 'none') === $val)>{{ $label }}</option>
                                                @endforeach
                                            </select>
                                        @elseif($key === 'ldap_encryption')
                                            <select name="{{ $key }}" class="form-select">
                                                @foreach(['none' => __('None (389)'), 'tls' => __('StartTLS (389)'), 'ssl' => __('SSL / LDAPS (636)')] as $val => $label)
                                                    <option value="{{ $val }}" @selected(old($key, $settings[$key] ?: 'none') === $val)>{{ $label }}</option>
                                                @endforeach
                                            </select>
                                        @elseif($key === 'ldap_bind_password')
                                            <input type="password" name="{{ $key }}" value="{{ old($key, $settings[$key]) }}" class="form-control" autocomplete="new-password">
                                        @elseif(in_array($key, ['saml_idp_x509', 'saml_sp_x509', 'saml_sp_private_key', 'lti_private_key', 'custom_head_code', 'custom_css', 'custom_body_code'], true))
                                            <textarea name="{{ $key }}" class="form-control font-monospace" rows="4" spellcheck="false">{{ old($key, $settings[$key]) }}</textarea>
                                        @elseif(str_ends_with($key, '_enabled'))
                                            <select name="{{ $key }}" class="form-select">
                                                <option value="0" @selected(! old($key, $settings[$key]))>{{ __('Off') }}</option>
                                                <option value="1" @selected((string) old($key, $settings[$key]) === '1')>{{ __('On') }}</option>
                                            </select>
                                            @if(str_starts_with($key, 'sso_'))
                                                <div class="form-text">{{ __('Redirect URI:') }} <code>{{ route('sso.callback', \Illuminate\Support\Str::between($key, 'sso_', '_enabled')) }}</code></div>
                                            @endif
                                        @elseif($key === 'video_watermark_enabled')
                                            <select name="{{ $key }}" class="form-select">
                                                <option value="0" @selected(! old($key, $settings[$key]))>{{ __('Off') }}</option>
                                                <option value="1" @selected((string) old($key, $settings[$key]) === '1')>{{ __('On') }}</option>
                                            </select>
                                        @elseif(in_array($key, ['footer_text', 'invoice_address', 'invoice_footer', 'manual_payment_instructions'], true))
                                            <textarea name="{{ $key }}" class="form-control" rows="{{ $key === 'manual_payment_instructions' ? 4 : 2 }}">{{ old($key, $settings[$key]) }}</textarea>
                                        @elseif(in_array($key, ['site_logo', 'site_logo_dark', 'site_favicon'], true))
                                            @php($lfCur = $settings[$key] ? media_url($settings[$key]) : null)
                                            <div class="lf-brand-field border rounded-3 p-3 {{ $key === 'site_logo_dark' ? 'lf-brand-field-dark' : '' }}">
                                                <div class="lf-brand-preview mb-2" data-preview>
                                                    @if($lfCur)
                                                        <img src="{{ $lfCur }}" alt="" style="max-height:{{ $key === 'site_favicon' ? 32 : 48 }}px;max-width:100%;object-fit:contain">
                                                    @else
                                                        <span class="text-muted small">{{ __('Not uploaded — the site name is shown as text.') }}</span>
                                                    @endif
                                                </div>
                                                <input type="file" name="{{ $key }}" class="form-control form-control-sm" accept="{{ $key === 'site_favicon' ? '.png,.ico,.svg,.jpg,.jpeg,.webp' : '.png,.svg,.jpg,.jpeg,.webp' }}" data-preview-input>
                                                @if($lfCur)
                                                    <label class="form-check mt-2 mb-0 small">
                                                        <input type="checkbox" name="remove_{{ $key }}" value="1" class="form-check-input"> {{ __('Remove') }}
                                                    </label>
                                                @endif
                                            </div>
                                            <div class="form-text">
                                                @if($key === 'site_logo') {{ __('Shown in the header, emails, certificates and invoices. PNG or WebP with a transparent background, max 2 MB.') }}
                                                @elseif($key === 'site_logo_dark') {{ __('Used on dark backgrounds — dark theme, the dashboard sidebar and the footer. Falls back to the light logo.') }}
                                                @else {{ __('Browser-tab icon. Square PNG or ICO, 32×32 or larger, max 1 MB.') }} @endif
                                            </div>
                                        @else
                                            <input type="text" name="{{ $key }}" value="{{ old($key, $settings[$key]) }}" class="form-control">
                                        @endif
                                    </div>
                                @endforeach
                            </div>
                            @endif
                        </div>
                    @endforeach
                </div>
            </div>
            <div class="card-footer bg-white d-flex flex-wrap gap-2 justify-content-end">
                {{-- Only meaningful on the LDAP tab; shown there via JS below. --}}
                <button type="submit" formaction="{{ route('admin.settings.ldap.test') }}" class="btn btn-outline-secondary d-none" id="lfLdapTest" formnovalidate
                        title="{{ __('Binds with the saved service account — save first if you just changed something.') }}">
                    <i class="bi bi-plug me-1"></i> {{ __('Test LDAP connection') }}
                </button>
                <button class="btn btn-primary"><i class="bi bi-check-lg me-1"></i> {{ __('Save Settings') }}</button>
            </div>
        </div>
    </form>
@endsection

@push('scripts')
<style>
.lf-brand-field { background: var(--bs-body-bg); }
.lf-brand-field-dark .lf-brand-preview { background: #0f172a; border-radius: .5rem; padding: .5rem .75rem; }
.lf-brand-field-dark .lf-brand-preview .text-muted { color: #94a3b8 !important; }
.lf-brand-preview { min-height: 40px; display: flex; align-items: center; }
</style>
<script>
// The LDAP test button only makes sense while the LDAP tab is open.
(function () {
    var btn = document.getElementById('lfLdapTest');
    if (!btn) return;
    document.querySelectorAll('[data-bs-toggle="tab"]').forEach(function (t) {
        t.addEventListener('shown.bs.tab', function () { btn.classList.toggle('d-none', t.dataset.bsTarget !== '#tab-ldap'); });
    });
})();
// Show the chosen logo/favicon before saving.
document.querySelectorAll('[data-preview-input]').forEach(function (input) {
    input.addEventListener('change', function () {
        var file = input.files && input.files[0], box = input.closest('.lf-brand-field').querySelector('[data-preview]');
        if (!file || !box) return;
        var img = document.createElement('img');
        img.style.maxHeight = input.name === 'site_favicon' ? '32px' : '48px'; img.style.maxWidth = '100%'; img.style.objectFit = 'contain';
        img.src = URL.createObjectURL(file);
        box.innerHTML = ''; box.appendChild(img);
    });
});
// Add / remove rows for the login-screen highlights.
(function () {
    var list = document.getElementById('authFeatures'), add = document.getElementById('authFeatureAdd');
    if (!list || !add) return;

    add.addEventListener('click', function () {
        var i = Date.now();
        var row = document.createElement('div');
        row.className = 'lf-auth-row border rounded-3 p-2 d-flex gap-2 align-items-start flex-wrap';
        row.innerHTML =
            '<div style="width:170px"><label class="form-label small mb-1">{{ __('Icon') }}</label>'
            + '<input type="text" name="auth_features[' + i + '][icon]" value="bi-check2-circle" class="form-control form-control-sm"></div>'
            + '<div style="width:220px"><label class="form-label small mb-1">{{ __('Title') }}</label>'
            + '<input type="text" name="auth_features[' + i + '][title]" class="form-control form-control-sm"></div>'
            + '<div class="flex-grow-1" style="min-width:220px"><label class="form-label small mb-1">{{ __('Text') }}</label>'
            + '<input type="text" name="auth_features[' + i + '][text]" class="form-control form-control-sm"></div>'
            + '<button type="button" class="btn btn-sm btn-light text-danger lf-auth-del mt-4"><i class="bi bi-trash"></i></button>';
        list.appendChild(row);
    });

    // Removing every row is how an admin returns to the built-in defaults, so a
    // hidden marker keeps the key in the request even when the list is empty.
    list.closest('form').addEventListener('submit', function (e) {
        if (!list.querySelector('.lf-auth-row')) {
            var flag = document.createElement('input');
            flag.type = 'hidden'; flag.name = 'auth_features[]'; flag.value = '';
            e.target.appendChild(flag);
        }
    });

    document.addEventListener('click', function (e) {
        var d = e.target.closest('.lf-auth-del');
        if (d) d.closest('.lf-auth-row').remove();
    });
})();
</script>
@endpush