@extends('layouts.admin')
@section('title', 'Users and roles')
@section('crumbs', 'Settings · Super Admin only')
@section('actions')<a href="{{ route('admin.users.create') }}" class="btn btn-sm">Add admin user</a>@endsection
@section('content')
<div class="grid g3">
    <div class="panel panel-b stack" style="gap:6px"><span class="eyebrow">Admin panel</span><span class="d4">{{ $admins->count() }} users</span><span class="small muted">/admin/login · password + 6-digit code</span></div>
    <div class="panel panel-b stack" style="gap:6px"><span class="eyebrow">Team workspace</span><span class="d4">{{ $teamCount }} people</span><span class="small muted">/team/login · managed in <a href="{{ route('admin.employees.index') }}">Team directory</a></span></div>
    <div class="panel panel-b stack" style="gap:6px"><span class="eyebrow">Client portal</span><span class="d4">{{ $clientCount }} client users</span><span class="small muted">/client/login · invited from each <a href="{{ route('admin.clients.index') }}">client</a></span></div>
</div>
<section class="panel">
    <div class="tbl-wrap"><table class="tbl">
        <thead><tr><th>Name</th><th>Email</th><th>Role</th><th>Status</th><th>Last sign-in</th><th></th></tr></thead>
        <tbody>@foreach($admins as $a)
            <tr><td class="row" style="gap:10px;flex-wrap:nowrap"><span class="av">{{ $a->initials() }}</span>{{ $a->name }}</td><td class="small">{{ $a->email }}</td><td><span class="badge {{ ['super_admin' => 'b-ink', 'manager' => '', 'hr' => 'b-good', 'accounts' => 'b-warn'][$a->role] }}">{{ $a->roleLabel() }}</span></td><td><x-badge :status="$a->is_active ? 'active' : 'draft'" :label="$a->is_active ? 'Active' : 'Disabled'" /></td><td class="small muted">{{ $a->last_login_at?->diffForHumans() ?? 'Never' }}</td><td><a href="{{ route('admin.users.edit', $a) }}" class="xs">Edit</a></td></tr>
        @endforeach</tbody>
    </table></div>
</section>
<section class="panel">
    <div class="panel-h"><h2 class="ht">What each role can open</h2></div>
    @php($areas = ['dashboard' => 'Dashboard', 'crm' => 'Leads and clients', 'proposals' => 'Proposals', 'projects' => 'Projects and calendar', 'support' => 'Support tickets', 'finance' => 'Invoices, expenses, finance report', 'content' => 'Website content', 'analytics' => 'Website analytics', 'hr' => 'Team, attendance, leave', 'timesheets' => 'Timesheets', 'payroll' => 'Payroll', 'hiring' => 'Hiring', 'users' => 'Users, settings, activity log'])
    <div class="tbl-wrap"><table class="tbl">
        <thead><tr><th>Area</th>@foreach(\App\Models\Admin::ROLES as $r => $l)<th>{{ $l }}</th>@endforeach</tr></thead>
        <tbody>@foreach($areas as $k => $label)<tr><td>{{ $label }}</td>@foreach(\App\Models\Admin::ROLES as $r => $l)@php($p = \App\Models\Admin::PERMISSIONS[$r] ?? [])<td>{{ $r === 'super_admin' || in_array($k, $p) ? '✓ Full' : (in_array($k.'.view', $p) ? 'View only' : '—') }}</td>@endforeach</tr>@endforeach</tbody>
    </table></div>
    <p class="panel-b xs muted" style="border-top:1px solid var(--line-2)">Roles are defined in app/Models/Admin.php (PERMISSIONS). Team members and clients never see the admin panel; they have their own separate logins.</p>
</section>
@endsection