@extends('layouts.app')
@section('title', '審核管理中心')

@php
use Illuminate\Support\Facades\Auth;
$u = Auth::user();
$isAdmin = $u->role === 'admin';
$isSupervisorOrAdmin = in_array($u->role, ['supervisor', 'admin']);

$canReviewDevice  = $isSupervisorOrAdmin && ($isAdmin || $u->hasModuleAdminPermission('DeviceRequestController'));
$canReviewVpn     = $isSupervisorOrAdmin && ($isAdmin || $u->hasModuleAdminPermission('VpnRequestController'));
$canUseVpnAcct    = $isAdmin || $u->hasModulePermission('VpnAccountController');
$canReviewGitlab  = $isSupervisorOrAdmin && ($isAdmin || $u->hasModuleAdminPermission('GitlabRequestController'));
$canReviewRedmine = $isSupervisorOrAdmin && ($isAdmin || $u->hasModuleAdminPermission('RedmineAccountRequestController'));
$canReviewAccount = $isSupervisorOrAdmin && ($isAdmin || $u->hasModuleAdminPermission('AccountRequestController'));
$canReviewOvertime= $isSupervisorOrAdmin && ($isAdmin || $u->hasModuleAdminPermission('OvertimeRequestController'));
$canReviewHandover= $isSupervisorOrAdmin
    || \App\Models\HandoverApproval::where('approver_id', $u->id)->exists();
$hasSubordinates  = \App\Models\User::where('supervisor_id', $u->id)->exists();
$canManageLeave   = $isAdmin || $u->hasModuleAdminPermission('LeaveSettingController');

$leaveApprovalCount = 0;
if ($hasSubordinates || $canManageLeave) {
    $leaveApprovalCount = \App\Models\LeaveRequest::query()
        ->when($canManageLeave, fn($q) => $q->whereIn('status', ['pending','supervisor_approved'])->where('days', '>', 3)
            ->union(\App\Models\LeaveRequest::where('status','pending')->where('days','<=',3)
                ->whereHas('user', fn($u2) => $u2->where('supervisor_id', $u->id)))
        )
        ->when(!$canManageLeave && $hasSubordinates, fn($q) =>
            $q->where('status','pending')->where('days','<=',3)
              ->whereHas('user', fn($u2) => $u2->where('supervisor_id', $u->id))
        )
        ->count();
}

$hasPersonnel  = ($hasSubordinates || $canManageLeave) || $canReviewOvertime || $canReviewHandover;
$hasAccountSvc = $canReviewVpn || $canReviewGitlab || $canReviewRedmine || $canReviewAccount || $isSupervisorOrAdmin;
$hasDevice     = $canReviewDevice;
@endphp

@push('styles')
<style>
.sc-page {
  max-width: 1280px;
  margin: 0 auto;
  padding: 44px 32px 80px;
}
.sc-page-title {
  font-size: 1.75rem;
  font-weight: 800;
  color: #0f172a;
  margin-bottom: 6px;
  letter-spacing: -.02em;
}
.sc-page-sub { font-size: .9rem; color: #94a3b8; margin-bottom: 40px; }

.sc-cols {
  display: grid;
  grid-template-columns: repeat(3, 1fr);
  gap: 20px;
  align-items: start;
}
.sc-section {
  border-radius: 20px;
  border: 1px solid #e2e8f0;
  background: #fff;
  overflow: hidden;
  box-shadow: 0 2px 12px rgba(0,0,0,.06);
}
.sc-sec-head {
  padding: 22px 24px 20px;
  border-bottom: 1px solid #f1f5f9;
  display: flex;
  align-items: center;
  gap: 16px;
}
.sc-sec-icon {
  width: 52px; height: 52px;
  border-radius: 14px;
  display: flex; align-items: center; justify-content: center;
  font-size: 1.4rem; flex-shrink: 0;
}
.sc-sec-title {
  font-size: 1.05rem;
  font-weight: 800;
  color: #0f172a;
  letter-spacing: -.01em;
  margin-bottom: 3px;
}
.sc-sec-sub { font-size: .78rem; color: #94a3b8; line-height: 1.4; }

.sc-list {
  display: flex;
  flex-direction: column;
  padding: 16px;
  gap: 10px;
}
.sc-item {
  background: #f8fafc;
  border: 1px solid #e8edf2;
  border-radius: 14px;
  padding: 18px 18px 16px;
  transition: background .12s, box-shadow .14s, border-color .12s;
}
.sc-item:hover {
  background: #f0f5ff;
  border-color: #c7d7f8;
  box-shadow: 0 4px 16px rgba(59,130,246,.1);
}
.sc-item-top {
  display: flex;
  align-items: flex-start;
  gap: 13px;
  margin-bottom: 14px;
}
.sc-item-icon {
  width: 44px; height: 44px;
  border-radius: 12px;
  display: flex; align-items: center; justify-content: center;
  font-size: 1.15rem; flex-shrink: 0;
}
.sc-item-title {
  font-size: .9rem;
  font-weight: 700;
  color: #1e293b;
  margin-bottom: 4px;
  line-height: 1.3;
}
.sc-item-desc {
  font-size: .78rem;
  color: #64748b;
  line-height: 1.5;
}
.sc-item-btns {
  display: flex;
  gap: 8px;
  flex-wrap: wrap;
}
.sc-btn-apply {
  flex: 1;
  display: inline-flex; align-items: center; justify-content: center; gap: 5px;
  padding: 9px 14px;
  border-radius: 9px;
  font-size: .8rem; font-weight: 700;
  border: none; cursor: pointer;
  text-decoration: none;
  transition: opacity .12s, transform .1s;
  white-space: nowrap;
}
.sc-btn-apply:hover { opacity: .88; transform: translateY(-1px); }
.sc-btn-record {
  display: inline-flex; align-items: center; justify-content: center; gap: 5px;
  padding: 9px 14px;
  border-radius: 9px;
  font-size: .8rem; font-weight: 600;
  background: #fff;
  border: 1px solid #d1d9e6;
  color: #475569;
  cursor: pointer;
  text-decoration: none;
  transition: background .12s, border-color .12s;
  white-space: nowrap;
}
.sc-btn-record:hover { background: #f1f5f9; border-color: #94a3b8; color: #1e293b; }

@media (max-width: 900px) {
  .sc-cols { grid-template-columns: 1fr 1fr; }
}
@media (max-width: 580px) {
  .sc-cols { grid-template-columns: 1fr; }
  .sc-page { padding: 24px 16px 60px; }
}

[data-bs-theme="dark"] .sc-page-title { color: #dee2e6; }
[data-bs-theme="dark"] .sc-section { background: #1c1f26 !important; border-color: #2e3340 !important; }
[data-bs-theme="dark"] .sc-sec-head { border-bottom-color: #2e3340 !important; }
[data-bs-theme="dark"] .sc-sec-title { color: #dee2e6; }
[data-bs-theme="dark"] .sc-item { background: #252830 !important; border-color: #2e3340 !important; }
[data-bs-theme="dark"] .sc-item:hover { background: #2e3340 !important; border-color: #3d4455 !important; }
[data-bs-theme="dark"] .sc-item-title { color: #dee2e6; }
[data-bs-theme="dark"] .sc-item-desc { color: #9ca3af; }
[data-bs-theme="dark"] .sc-btn-record { background: #252830 !important; border-color: #3a3f4b !important; color: #dee2e6 !important; }
[data-bs-theme="dark"] .sc-btn-record:hover { background: #2e3340 !important; color: #fff !important; }
</style>
@endpush

@section('content')
<div class="sc-page">

  <div>
    <h1 class="sc-page-title">審核管理中心</h1>
    <p class="sc-page-sub">管理各類申請案件的審核流程，依您的權限顯示可操作項目</p>
  </div>

  @if (!$hasPersonnel && !$hasAccountSvc && !$hasDevice)
  <div class="text-center py-5 text-muted">
    <i class="bi bi-lock" style="font-size:2.5rem;display:block;margin-bottom:12px;"></i>
    您目前沒有任何審核權限，如有疑問請聯繫系統管理者。
  </div>
  @else
  <div class="sc-cols">

    {{-- ══════════════════════════════ 人事審核 ══════════════════════════════ --}}
    @if ($hasPersonnel)
    <div class="sc-section">
      <div class="sc-sec-head">
        <div class="sc-sec-icon" style="background:#ede9fe;color:#6d28d9;">
          <i class="bi bi-people"></i>
        </div>
        <div>
          <div class="sc-sec-title">人事審核</div>
          <div class="sc-sec-sub">請假、加班與調離職相關審核作業</div>
        </div>
      </div>
      <div class="sc-list">

        {{-- 請假審核 --}}
        @if ($hasSubordinates || $canManageLeave)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#ede9fe;color:#6d28d9;"><i class="bi bi-calendar-check"></i></div>
            <div>
              <div class="sc-item-title">
                請假審核
                @if($leaveApprovalCount > 0)
                  <span class="badge bg-danger rounded-pill ms-1" style="font-size:.7rem;">{{ $leaveApprovalCount }}</span>
                @endif
              </div>
              <div class="sc-item-desc">審核部屬請假申請，3 天以下由主管審核，超過 3 天需進一步核准</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('leave.approval.index') }}" class="sc-btn-apply" style="background:#7c3aed;color:#fff;">
              <i class="bi bi-clipboard-check"></i>前往審核
            </a>
          </div>
        </div>
        @endif

        {{-- 加班審核 --}}
        @if ($canReviewOvertime)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#fef3c7;color:#b45309;"><i class="bi bi-clock-history"></i></div>
            <div>
              <div class="sc-item-title">加班審核</div>
              <div class="sc-item-desc">審核加班工時申請，主管初審後超過規定時數轉最終審核</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('overtime-requests.supervisor.index') }}" class="sc-btn-apply" style="background:#d97706;color:#fff;">
              <i class="bi bi-clipboard-check"></i>主管審核
            </a>
            <a href="{{ route('overtime-requests.department') }}" class="sc-btn-record">
              <i class="bi bi-bar-chart-line"></i>部門統計
            </a>
            @if ($isAdmin)
            <a href="{{ route('overtime-requests.admin.index') }}" class="sc-btn-record">
              <i class="bi bi-shield-check"></i>最終審核
            </a>
            @endif
          </div>
        </div>
        @endif

        {{-- 調離職交接審核 --}}
        @if ($canReviewHandover)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#fee2e2;color:#b91c1c;"><i class="bi bi-person-dash"></i></div>
            <div>
              <div class="sc-item-title">調離職交接審核</div>
              <div class="sc-item-desc">審核調職或離職的工作交接事項，確認完成後進行簽核</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('handovers.review') }}" class="sc-btn-apply" style="background:#dc2626;color:#fff;">
              <i class="bi bi-clipboard-check"></i>前往審核
            </a>
            @if ($isAdmin)
            <a href="{{ route('handovers.settings') }}" class="sc-btn-record">
              <i class="bi bi-person-gear"></i>審核人員設定
            </a>
            @endif
          </div>
        </div>
        @endif

      </div>
    </div>
    @endif

    {{-- ══════════════════════════════ 帳號服務審核 ══════════════════════════════ --}}
    @if ($hasAccountSvc)
    <div class="sc-section">
      <div class="sc-sec-head">
        <div class="sc-sec-icon" style="background:#dbeafe;color:#1d4ed8;">
          <i class="bi bi-person-badge"></i>
        </div>
        <div>
          <div class="sc-sec-title">帳號服務審核</div>
          <div class="sc-sec-sub">VPN、專案管理與主機信箱帳號申請審核</div>
        </div>
      </div>
      <div class="sc-list">

        {{-- VPN 審核 --}}
        @if ($canReviewVpn)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#dcfce7;color:#15803d;"><i class="bi bi-shield-lock"></i></div>
            <div>
              <div class="sc-item-title">VPN 帳號審核</div>
              <div class="sc-item-desc">審核 VPN 遠端連線帳號申請，主管初審後由 IT 管理者最終開通</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('vpn-requests.supervisor.index') }}" class="sc-btn-apply" style="background:#16a34a;color:#fff;">
              <i class="bi bi-clipboard-check"></i>主管審核
            </a>
            @if ($isAdmin)
            <a href="{{ route('vpn-requests.admin.index') }}" class="sc-btn-record">
              <i class="bi bi-shield-check"></i>最終審核
            </a>
            @endif
            @if ($canUseVpnAcct)
            <a href="{{ route('vpn-accounts.index') }}" class="sc-btn-record">
              <i class="bi bi-people"></i>帳號管理
            </a>
            @endif
          </div>
        </div>
        @endif

        {{-- 專案管理(GitLab)審核 --}}
        @if ($canReviewGitlab || $canReviewRedmine)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#fff7ed;color:#ea580c;"><i class="bi bi-shield-check"></i></div>
            <div>
              <div class="sc-item-title">專案管理(GitLab)審核</div>
              <div class="sc-item-desc">審核 GitLab 帳號申請、建立專案或加入既有專案的申請</div>
            </div>
          </div>
          <div class="sc-item-btns">
            @if ($canReviewGitlab)
            <a href="{{ route('gitlab-requests.supervisor.index') }}" class="sc-btn-apply" style="background:#ea580c;color:#fff;">
              <i class="bi bi-clipboard-check"></i>主管審核
            </a>
            @if ($isAdmin || $u->hasModuleAdminPermission('GitlabRequestController'))
            <a href="{{ route('gitlab-requests.admin.index') }}" class="sc-btn-record">
              <i class="bi bi-shield-check"></i>最終審核
            </a>
            @endif
            @endif
          </div>
        </div>
        @endif

        {{-- 主機/信箱帳號審核 --}}
        @if ($canReviewAccount)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#e0f2fe;color:#0284c7;"><i class="bi bi-envelope-at"></i></div>
            <div>
              <div class="sc-item-title">主機 / 信箱帳號審核</div>
              <div class="sc-item-desc">審核伺服器連線或公司電子信箱帳號申請，主管初審後 IT 最終開通</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('account-requests.supervisor.index') }}" class="sc-btn-apply" style="background:#0284c7;color:#fff;">
              <i class="bi bi-clipboard-check"></i>主管審核
            </a>
            @if ($isAdmin || $u->hasModuleAdminPermission('AccountRequestController'))
            <a href="{{ route('account-requests.admin.index') }}" class="sc-btn-record">
              <i class="bi bi-shield-check"></i>最終審核
            </a>
            @endif
          </div>
        </div>
        @endif

        {{-- 防火牆申請 --}}
        @if ($isSupervisorOrAdmin)
        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#fefce8;color:#92400e;"><i class="bi bi-shield-lock"></i></div>
            <div>
              <div class="sc-item-title">防火牆申請審核</div>
              <div class="sc-item-desc">審核客戶主機 IP 存取 git.steps.tw 的防火牆開放申請</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('firewall-requests.supervisor.index') }}" class="sc-btn-apply" style="background:#d97706;color:#fff;">
              <i class="bi bi-clipboard-check"></i>主管初審
            </a>
            @if (Auth::id() === 1)
            <a href="{{ route('firewall-requests.admin.index') }}" class="sc-btn-record">
              <i class="bi bi-shield-check"></i>最終審核
            </a>
            @endif
          </div>
        </div>
        @endif

      </div>
    </div>
    @endif

    {{-- ══════════════════════════════ 設備審核 ══════════════════════════════ --}}
    @if ($hasDevice)
    <div class="sc-section">
      <div class="sc-sec-head">
        <div class="sc-sec-icon" style="background:#f0fdf4;color:#166534;">
          <i class="bi bi-laptop"></i>
        </div>
        <div>
          <div class="sc-sec-title">設備審核</div>
          <div class="sc-sec-sub">設備攜出/入申請的審核管理</div>
        </div>
      </div>
      <div class="sc-list">

        <div class="sc-item">
          <div class="sc-item-top">
            <div class="sc-item-icon" style="background:#f0fdf4;color:#166534;"><i class="bi bi-box-arrow-in-right"></i></div>
            <div>
              <div class="sc-item-title">設備攜出/入審核</div>
              <div class="sc-item-desc">審核員工攜帶公司設備進出辦公區域的申請，確認設備資訊與原因後簽核</div>
            </div>
          </div>
          <div class="sc-item-btns">
            <a href="{{ route('device-requests.supervisor.index') }}" class="sc-btn-apply" style="background:#16a34a;color:#fff;">
              <i class="bi bi-clipboard-check"></i>主管審核
            </a>
            @if ($isAdmin)
            <a href="{{ route('device-requests.admin.index') }}" class="sc-btn-record">
              <i class="bi bi-shield-check"></i>最終審核
            </a>
            @endif
          </div>
        </div>

      </div>
    </div>
    @endif

  </div>{{-- /sc-cols --}}
  @endif

</div>
@endsection