{{--
    One users table, rendered once per tab.

    @param \Illuminate\Support\Collection $rows
    @param string $kind   'workspace' | 'native' — only changes the empty state,
                          since the tab itself already says which kind these are
                          (that's why there's no Source column any more).
--}}
<div class="table-responsive">
    <table class="table table-vcenter card-table">
        <thead>
            <tr>
                <th class="w-1">
                    <input type="checkbox" class="form-check-input m-0" data-invite-all="{{ $kind }}"
                           aria-label="Select all for invite">
                </th>
                <th>Name</th>
                <th>Email</th>
                <th>Role</th>
                <th>Access</th>
                <th>Timesheet</th>
                <th>Total Activity</th>
                <th class="w-1"></th>
            </tr>
        </thead>
        <tbody>
            @forelse ($rows as $user)
                <tr>
                    <td>
                        {{-- `form=` rather than wrapping the table: each row's
                             actions cell already contains a delete <form>, and
                             nested forms are invalid HTML (the browser drops the
                             inner one). This binds the box to the footer form
                             sitting outside the table. --}}
                        <input type="checkbox" class="form-check-input m-0" name="users[]" value="{{ $user->id }}"
                               form="invite-form-{{ $kind }}" data-invite-row="{{ $kind }}"
                               data-portal="{{ \App\Support\PortalInvite::refusal($user) ? 0 : 1 }}"
                               aria-label="Invite {{ $user->name }}">
                    </td>
                    <td class="fw-semibold">
                        <a href="{{ route('admin.users.show', $user) }}" class="text-reset">{{ $user->name }}</a>
                        {{-- Only reachable via the All / Inactive filter, so the
                             badge is the whole reason the row is visible. --}}
                        @if ($user->status === \App\Support\EmployeeStatus::INACTIVE)
                            <span class="badge bg-secondary-lt ms-1">Inactive</span>
                        @endif
                        {{-- Mirrored from the workspace; blank for native accounts. --}}
                        @if ($user->designation || $user->department)
                            <div class="text-secondary small fw-normal">
                                {{ collect([$user->designation, $user->department])->filter()->implode(' · ') }}
                            </div>
                        @endif
                    </td>
                    <td class="text-secondary">{{ $user->email }}</td>
                    <td>{{ $user->roles->first()?->label ?? $user->roles->first()?->name ?? '—' }}</td>
                    <td>
                        {{-- Access is the role; this says what it amounts to. --}}
                        @if ($user->isSuperAdmin())
                            <span class="badge bg-purple-lt">Super Admin</span>
                        @elseif ($user->canUsePortal())
                            @php $everyone = $user->canAccess(\App\Support\Permissions::VIEW_ALL); @endphp
                            <span class="badge {{ $everyone ? 'bg-blue-lt' : 'bg-azure-lt' }}"
                                  title="Signs in to the web portal">
                                Portal · {{ $everyone ? 'everyone' : ($user->canAccess(\App\Support\Permissions::VIEW_TEAM) ? 'their teams' : 'self') }}
                            </span>
                        @else
                            <span class="text-secondary">Desktop</span>
                        @endif
                    </td>
                    <td>
                        {{-- A switch rather than a badge: it is flicked from the
                             list, and posts on change so there is nothing to save. --}}
                        <form method="POST" action="{{ route('admin.users.timesheet', $user) }}" class="m-0">
                            @csrf @method('PATCH')
                            <label class="form-check form-switch m-0"
                                   title="{{ $user->tracksTimesheet()
                                            ? 'On the Timesheet and its Teams digest' 
                                            : 'Excluded from the Timesheet and its Teams digest' }}">
                                <input class="form-check-input" type="checkbox"
                                       onchange="this.form.submit()"
                                       @checked($user->tracksTimesheet())>
                            </label>
                        </form>
                    </td>
                    <td>
                        @php
                            $totalSec = (int) ($user->time_intervals_sum_active_seconds ?? 0);
                        @endphp
                        <span class="text-{{ $totalSec > 0 ? 'primary' : 'secondary' }} fw-semibold">
                            {{ \App\Support\Duration::hhmm($totalSec) }}
                        </span>
                    </td>
                    <td class="text-end text-nowrap">
                        <a href="{{ route('admin.users.show', $user) }}" class="btn btn-sm btn-ghost-primary" title="Open this user">
                            <i class="ti ti-external-link me-1"></i>Open
                        </a>
                        @if ($kind === 'workspace')
                            {{-- Diagnosis: what is this employee's desktop showing, and
                                 has the workspace moved on since it synced? --}}
                            {{-- Opened declaratively (data-bs-toggle) like every other
                                 modal here: Tabler's bundle exposes no `bootstrap`
                                 global, so the JS API isn't available. --}}
                            <button type="button" class="btn btn-sm btn-ghost-primary js-user-tasks"
                                    data-bs-toggle="modal" data-bs-target="#user-tasks"
                                    data-url="{{ route('admin.users.tasks', $user) }}"
                                    data-name="{{ $user->name }}" title="What this user's desktop is showing">

                                <i class="ti ti-list-check me-1"></i>Tasks
                            </button>
                        @endif
                        <div class="dropdown d-inline-block">
                            <button class="btn btn-sm btn-ghost-secondary" data-bs-toggle="dropdown">
                                <i class="ti ti-dots-vertical"></i>
                            </button>
                            <div class="dropdown-menu dropdown-menu-end">
                                <button class="dropdown-item" data-bs-toggle="modal"
                                        data-bs-target="#user-edit-{{ $user->id }}">
                                    <i class="ti ti-edit me-2"></i> Edit
                                </button>
                                @if (! \App\Support\Impersonation::refusal(auth()->user(), $user))
                                    <form method="POST" action="{{ route('admin.users.quick-login', $user) }}" class="m-0"
                                          onsubmit="return confirm(@js('Sign in as '.$user->name.'? You will see Worklance exactly as they do, until you press Return.'))">
                                        @csrf
                                        <button class="dropdown-item"><i class="ti ti-login-2 me-2"></i> Quick Login</button>
                                    </form>
                                @endif
                                <div class="dropdown-divider"></div>
                                <form method="POST" action="{{ route('admin.users.destroy', $user) }}"
                                      onsubmit="return confirm('Delete this user?')">
                                    @csrf @method('DELETE')
                                    <button class="dropdown-item text-danger"><i class="ti ti-trash me-2"></i> Delete</button>
                                </form>
                            </div>
                        </div>
                    </td>
                </tr>
            @empty
                <tr><td colspan="8" class="text-center text-secondary py-4">
                    @if ($kind === 'workspace')
                        No workspace users mirrored into this company yet — use “Sync Workspace Users”.
                    @else
                        No native users in this company yet — create one with “New User”.
                    @endif
                </td></tr>
            @endforelse
        </tbody>
    </table>
</div>

@if ($rows->isNotEmpty())
    {{-- The target of every checkbox above (see the `form=` note there). One
         button for the whole tab rather than a Send Invite per row: people are
         onboarded a team at a time. Both buttons send the same ticked rows;
         Send Portal Invite goes to its own action via `formaction`. --}}
    @php
        $teamsReady = $activeCompany?->usesMicrosoft() && $activeCompany->hasMicrosoftBotConnected();
    @endphp
    <form id="invite-form-{{ $kind }}" method="POST" action="{{ route('admin.users.send-invites') }}"
          class="card-footer d-flex align-items-center gap-2 flex-wrap">
        @csrf
        <span class="text-secondary small" data-invite-count="{{ $kind }}">No one selected</span>
        <button class="btn btn-primary btn-sm ms-auto" data-invite-submit="{{ $kind }}" disabled
                data-confirm="Send the Worklance download invite (email) to {n}?">
            <i class="ti ti-mail-forward me-1"></i>Send Invite
        </button>
        {{-- A disabled button swallows hover, so the reason rides on the wrapper. --}}
        <span class="d-inline-block"
              @unless ($teamsReady) title="Connect a Microsoft account for this company first (Companies → Microsoft integration)." @endunless>
            <button class="btn btn-azure btn-sm" data-invite-submit="{{ $kind }}" data-portal-only disabled
                    formaction="{{ route('admin.users.send-portal-invites') }}"
                    data-confirm="Send the “monitor your team” Teams message to {n} with portal access?"
                    @unless ($teamsReady) data-unavailable @endunless>
                <i class="ti ti-brand-teams me-1"></i>Send Portal Invite
            </button>
        </span>
    </form>
@endif