@php

/**
 * Staff screen-lock PIN pad, used in TWO presentations of the same markup:
 *   - overlay (default): shown on the dashboard by assets/js/staff-lock.js after
 *     $lockSeconds of inactivity; unchanged behaviour, but it now also engages the
 *     SERVER lock (data-engage-url) so navigating away is bounced to the full page.
 *   - full page ($fullpage=true): rendered by resources/views/vendor/lock-screen.blade.php as
 *     the screen every request lands on while the `qm_locked` session flag is set.
 *
 * @var int    $lockSeconds  idle seconds before the overlay auto-locks (0 = disabled)
 * @var bool   $fullpage     render as the standalone full-page lock (default false)
 * @var string $home         where the full-page unlock returns to (role landing)
 */
use App\Support\Auth;

$u    = Auth::user();
$role = $u['role'] ?? '';
$lockSeconds = (int) ($lockSeconds ?? 0);
$fullpage = !empty($fullpage);
$home     = (string) ($home ?? '/');

if ($fullpage) {
    // The full-page lock always renders for a terminal staff member with a PIN.
    if (!staff_has_pin($u)) {
        return;
    }
} else {
    // Overlay: unchanged — only for terminal staff with a PIN AND a positive idle
    // timeout configured by the owner.
    if (!\App\Models\Role::isStaff($role) || $lockSeconds <= 0 || empty($u['pin_hash'])) {
        return;
    }
}
$avatar = avatar_src($u['avatar'] ?? null);
$name   = (string) ($u['name'] ?? t_raw('dashboard.lock_name_fallback'));
// The shipped roles name their department; anything created on the Roles screen shows its
// own label rather than a generic fallback.
$dept   = ['kitchen_staff' => t_raw('dashboard.lock_dept_kitchen'), 'host_staff' => t_raw('dashboard.lock_dept_host'), 'waiter_staff' => t_raw('dashboard.lock_dept_waiter'), 'manager_staff' => t_raw('dashboard.lock_dept_manager')][$role] ?? ($role !== '' ? role_label($role) : t_raw('dashboard.lock_dept_fallback'));
@endphp
<div id="qm-lock" class="qm-lock{{ $fullpage ? ' qm-lock--page' : '' }}" data-lock-seconds="{{ $lockSeconds }}" data-unlock-url="{{ route('vendor.lock.unlock') }}" data-engage-url="{{ route('vendor.lock.engage') }}" {!! $fullpage ? 'data-lock-fullpage data-lock-home="' . e(url($home)) . '"' : 'hidden' !!}>
    <div class="qm-lock-card" role="dialog" aria-modal="true" aria-labelledby="qm-lock-name" aria-describedby="qm-lock-sub">
        <img class="qm-lock-avatar" src="{{ $avatar }}" alt="">
        <div class="qm-lock-name" id="qm-lock-name">{{ $name }}</div>
        <div class="qm-lock-dept">{{ $dept }} &middot; {{ t_raw('dashboard.lock_status_locked') }}</div>
        <div class="qm-lock-sub" id="qm-lock-sub">{{ t_raw('dashboard.lock_enter_pin') }}</div>
        @if (demo_mode())
@php // Preview only: the seeded demo PIN is 1234 (database/seed.sql).; @endphp
        <div class="qm-lock-demo"><i class="fas fa-info-circle" aria-hidden="true"></i> {{ t_raw('dashboard.lock_preview_pin_label') }} <strong>1234</strong></div>
        @endif
        <div class="qm-lock-dots" id="qm-lock-dots" aria-hidden="true"><span></span><span></span><span></span><span></span></div>
        <div class="qm-lock-msg" id="qm-lock-msg" role="status" aria-live="assertive"></div>
        <div class="qm-lock-pad">
            @foreach ([1, 2, 3, 4, 5, 6, 7, 8, 9] as $d)
            <button type="button" class="qm-lock-key" data-key="{{ $d }}">{{ $d }}</button>
            @endforeach
            <button type="button" class="qm-lock-key qm-lock-key-ghost" data-action="clear" aria-label="{{ t_raw('dashboard.lock_clear_aria') }}">C</button>
            <button type="button" class="qm-lock-key" data-key="0">0</button>
            <button type="button" class="qm-lock-key qm-lock-key-ghost" data-action="back" aria-label="{{ t_raw('dashboard.lock_backspace_aria') }}"><i class="fas fa-backspace" aria-hidden="true"></i></button>
        </div>
        <form class="qm-lock-out" method="post" action="{{ route('logout') }}">@csrf<button type="submit" class="qm-lock-switch">{{ t_raw('dashboard.lock_not_you') }}</button></form>
    </div>
</div>