{{--
    Formulário de usuário (criação/edição) do painel (P2.S3, ADR-033). O módulo informa
    `title`/`breadcrumbs` e preenche **apenas** o conteúdo — shell, título da tela e estrutura são
    do layout (ADR-009/ADR-016). Senha nunca volta preenchida; erro foca o primeiro campo inválido.
--}}
@php
    $firstError = $errors->any() ? $errors->keys()[0] : null;
    $editing = $user !== null;
    $action = $editing
        ? route('acesso.cms.usuarios.update', $user)
        : route('acesso.cms.usuarios.store');
    $selectedRole = (string) old('role_id', $user?->role_id ?? '');
@endphp

<x-layout::cms
    :title="$heading"
    :breadcrumbs="[
        ['label' => __('acesso::cms.title'), 'url' => route('acesso.cms.usuarios.index')],
        ['label' => $heading],
    ]">
    <x-cms::form-errors />

    <x-cms::card>
        <form method="post" action="{{ $action }}" class="grid gap-4">
            @csrf
            @if ($editing)
                @method('PUT')
            @endif

            <x-cms::fieldset
                id="acesso-user-identity"
                :legend="__('acesso::cms.user_data')"
                :description="__('acesso::cms.user_data_help')">
                <x-cms::form-group
                    name="name"
                    :label="__('acesso::cms.name_field')"
                    :value="$user?->name"
                    required
                    :maxlength="120"
                    :autofocus="$firstError === 'name'" />

                <x-cms::form-group
                    name="email"
                    type="email"
                    :label="__('acesso::cms.email_field')"
                    :value="$user?->email"
                    required
                    :maxlength="255"
                    autocomplete="email"
                    :autofocus="$firstError === 'email'" />

                @if ($roleLocked && $user !== null)
                    <div class="form-control w-full">
                        <span class="label"><span class="label-text">{{ __('acesso::cms.role_field') }}</span></span>
                        <p class="font-medium">{{ $user->role?->nome ?? __('acesso::cms.no_role') }}</p>
                        <span class="label-text-alt">{{ __('acesso::cms.role_locked', ['role' => $user->role?->nome ?? '']) }}</span>
                        <input type="hidden" name="role_id" value="{{ $selectedRole }}">
                    </div>
                @else
                    <div class="form-control w-full">
                        <label class="label" for="field-role_id">
                            <span class="label-text">
                                {{ __('acesso::cms.role_field') }}<span aria-hidden="true"> *</span>
                            </span>
                        </label>

                        <select id="field-role_id" name="role_id" required class="select select-bordered w-full"
                                @if ($firstError === 'role_id') autofocus @endif
                                @if ($errors->has('role_id')) aria-invalid="true" aria-describedby="field-role_id-error" @endif>
                            @foreach ($roles as $role)
                                <option value="{{ $role->id }}" @selected($selectedRole === $role->id)>{{ $role->nome }}</option>
                            @endforeach
                        </select>

                        <span class="label-text-alt">{{ __('acesso::cms.role_help') }}</span>

                        @error('role_id')
                            <span id="field-role_id-error" class="label-text-alt text-error" role="alert">{{ $message }}</span>
                        @enderror
                    </div>
                @endif
            </x-cms::fieldset>

            <x-cms::fieldset
                id="acesso-user-password"
                :legend="__('acesso::cms.password_section')"
                :description="$editing ? __('acesso::cms.password_help_edit') : __('acesso::cms.password_help_create')">
                <x-cms::form-group
                    name="password"
                    type="password"
                    :label="$editing ? __('acesso::cms.password_new') : __('acesso::cms.password_field')"
                    :required="! $editing"
                    minlength="12"
                    autocomplete="new-password"
                    :autofocus="$firstError === 'password'" />

                <x-cms::form-group
                    name="password_confirmation"
                    type="password"
                    :label="__('acesso::cms.password_confirmation')"
                    :required="! $editing"
                    minlength="12"
                    autocomplete="new-password" />
            </x-cms::fieldset>

            <div class="flex flex-wrap items-center gap-2">
                <x-cms::button type="submit" variant="primary">{{ __('acesso::cms.save') }}</x-cms::button>
                <x-cms::button variant="ghost" :href="route('acesso.cms.usuarios.index')">{{ __('acesso::cms.cancel') }}</x-cms::button>
            </div>
        </form>
    </x-cms::card>
</x-layout::cms>