@php
    $isEdit = isset($user);
    $selectedRoles = old('roles', $isEdit ? $user->roles->pluck('name')->all() : []);
@endphp

<div class="row">
    <div class="col-12 col-lg-6">
        <x-form.input name="name" :label="__('auth::messages.fields.name')"
                      :value="$isEdit ? $user->name : null" required autofocus />

        <x-form.input name="email" type="email" :label="__('auth::messages.fields.email')"
                      :value="$isEdit ? $user->email : null" required autocomplete="off" />

        <x-form.input name="phone" :label="__('auth::messages.fields.phone')"
                      :value="$isEdit ? $user->phone : null" />

        <x-form.input name="employee_no" :label="__('auth::messages.fields.employee_no')"
                      :value="$isEdit ? $user->employee_no : null" />

        <x-form.input name="job_title" :label="__('auth::messages.fields.job_title')"
                      :value="$isEdit ? $user->job_title : null" />
    </div>

    <div class="col-12 col-lg-6">
        <x-form.select name="branch_id" :label="__('auth::messages.fields.branch')"
                       :options="$branches->pluck('name', 'id')->all()"
                       :selected="$isEdit ? $user->branch_id : null" required />

        <x-form.select name="locale" :label="__('auth::messages.fields.locale')"
                       :options="collect(config('clinic.locales'))->mapWithKeys(fn ($l, $code) => [$code => $l['native']])->all()"
                       :selected="$isEdit ? $user->locale : app()->getLocale()" required />

        @unless ($isEdit)
            <x-form.select name="status" :label="__('auth::messages.fields.status')"
                           :options="collect($statuses)->mapWithKeys(fn ($s) => [$s->value => $s->label()])->all()"
                           :selected="\App\Enums\UserStatus::Active->value" required />
        @endunless

        <fieldset class="mb-3">
            <legend class="form-label">{{ __('auth::messages.fields.roles') }}</legend>

            {{--
                Roles a user may not grant are not rendered at all. Showing a
                disabled checkbox for the Super Administrator role would only
                invite someone to try, and the service would reject it anyway —
                PrivilegeGuard is the real boundary, this is just courtesy.
            --}}
            @foreach ($roles as $role)
                @continue($role->name === \App\Enums\RoleName::SuperAdmin->value && ! auth()->user()->hasRole(\App\Enums\RoleName::SuperAdmin->value))
                <div class="form-check">
                    <input class="form-check-input" type="checkbox" name="roles[]"
                           value="{{ $role->name }}" id="role-{{ $role->name }}"
                           @checked(in_array($role->name, $selectedRoles, true))>
                    <label class="form-check-label" for="role-{{ $role->name }}">
                        {{ __('roles.'.$role->name) }}
                    </label>
                </div>
            @endforeach

            @error('roles')<div class="text-danger small mt-1">{{ $message }}</div>@enderror
        </fieldset>
    </div>
</div>

@include('auth::users._permissions', ['availableRoles' => $roles])

@unless ($isEdit)
    <hr>

    <div class="row">
        <div class="col-12 col-lg-6">
            <x-form.input name="password" type="password" :label="__('auth::messages.fields.password')"
                          required autocomplete="new-password" />
        </div>
        <div class="col-12 col-lg-6">
            <x-form.input name="password_confirmation" type="password"
                          :label="__('auth::messages.fields.password_confirmation')"
                          required autocomplete="new-password" />
        </div>
    </div>

    <div class="form-check mb-3">
        <input class="form-check-input" type="checkbox" name="must_change_password" id="must_change_password"
               value="1" @checked(old('must_change_password', true))>
        <label class="form-check-label" for="must_change_password">
            {{ __('auth::messages.users.must_change_password') }}
        </label>
    </div>
@endunless