@extends('layouts.admin')

@section('title', 'API Keys')

@section('content')
    <h1>API Keys</h1>
    <p class="subtitle">
        Manage Bearer tokens for the Step 1 API (<code>/api/v1/*</code>).
        Each token is scoped read-only and can be revoked independently.
    </p>

    @if (session('new_api_token'))
        <div class="alert alert-warning">
            <strong>New token — copy now:</strong>
            <code style="display:block;margin-top:0.5rem;word-break:break-all;">{{ session('new_api_token') }}</code>
        </div>
    @endif

    <div class="card" style="margin-bottom:1.5rem;">
        <h2 style="font-size:1rem;margin-bottom:1rem;color:#1e293b;">Issue new token</h2>
        <form method="POST" action="{{ route('admin.api-tokens.store') }}" class="token-form">
            @csrf
            <div class="form-grid">
                <label>
                    <span>Name</span>
                    <input type="text" name="name" value="{{ old('name', 'step1-client') }}" required maxlength="120" placeholder="step1-client">
                </label>
                <label>
                    <span>Rate limit (per minute)</span>
                    <input type="number" name="rate_limit_per_minute" value="{{ old('rate_limit_per_minute', config('attom.api_default_rate_limit_per_minute', 60)) }}" min="1" max="1000">
                </label>
                <label>
                    <span>Monthly ceiling</span>
                    <input type="number" name="monthly_ceiling" value="{{ old('monthly_ceiling', config('attom.api_default_monthly_ceiling', 3000)) }}" min="1" max="100000">
                </label>
            </div>
            <label class="checkbox-row">
                <input type="hidden" name="step1" value="0">
                <input type="checkbox" name="step1" value="1" checked>
                <span>Step 1 read-only scopes (resolve, verification, comparables, assessment)</span>
            </label>
            <button type="submit" class="btn-primary">Generate token</button>
        </form>
    </div>

    <div class="card">
        <h2 style="font-size:1rem;margin-bottom:1rem;color:#1e293b;">Active and revoked tokens</h2>
        <div style="overflow-x:auto;">
            <table>
                <thead>
                    <tr>
                        <th>Name</th>
                        <th>Prefix</th>
                        <th>Scopes</th>
                        <th>Usage</th>
                        <th>Limits</th>
                        <th>Status</th>
                        <th>Last used</th>
                        <th>Created</th>
                        <th>Action</th>
                    </tr>
                </thead>
                <tbody>
                    @forelse ($tokens as $token)
                        <tr>
                            <td>{{ $token->name }}</td>
                            <td><code>{{ $token->token_prefix }}…</code></td>
                            <td>
                                @foreach ($token->scopes ?? [] as $scope)
                                    <span class="badge badge-muted">{{ $scope }}</span>
                                @endforeach
                            </td>
                            <td>
                                {{ number_format($token->monthly_usage_count) }} / {{ number_format($token->monthly_ceiling) }} this month
                                <br><small>{{ number_format($token->search_logs_count) }} logged calls</small>
                            </td>
                            <td>
                                @if ($token->isRevoked())
                                    {{ number_format($token->monthly_ceiling) }}/month<br>{{ $token->rate_limit_per_minute }}/min
                                @else
                                    <form method="POST" action="{{ route('admin.api-tokens.limits', $token) }}" class="token-limits-form">
                                        @csrf
                                        @method('PATCH')
                                        <label><small>Calls/month</small>
                                            <input type="number" name="monthly_ceiling" value="{{ $token->monthly_ceiling }}" min="1" max="100000" style="width:6.5em">
                                        </label>
                                        <label><small>Per minute</small>
                                            <input type="number" name="rate_limit_per_minute" value="{{ $token->rate_limit_per_minute }}" min="1" max="1000" style="width:4.5em">
                                        </label>
                                        <button type="submit" class="btn-primary">Save</button>
                                    </form>
                                @endif
                            </td>
                            <td>
                                @if ($token->isRevoked())
                                    <span class="badge badge-error">Revoked</span>
                                @elseif ($token->isExpired())
                                    <span class="badge badge-error">Expired</span>
                                @else
                                    <span class="badge badge-success">Active</span>
                                @endif
                            </td>
                            <td>{{ $token->last_used_at?->diffForHumans() ?? '—' }}</td>
                            <td>
                                {{ $token->created_at?->format('Y-m-d') }}
                                @if ($token->createdBy)
                                    <br><small>{{ $token->createdBy->name }}</small>
                                @endif
                            </td>
                            <td>
                                @if (!$token->isRevoked())
                                    <form method="POST" action="{{ route('admin.api-tokens.revoke', $token) }}" onsubmit="return confirm('Revoke this token? Step 1 clients using it will lose access immediately.');">
                                        @csrf
                                        <button type="submit" class="btn-danger">Revoke</button>
                                    </form>
                                @else
                                    <small>{{ $token->revoked_at?->format('Y-m-d H:i') }}</small>
                                @endif
                            </td>
                        </tr>
                    @empty
                        <tr>
                            <td colspan="9">No API tokens yet. Generate one above.</td>
                        </tr>
                    @endforelse
                </tbody>
            </table>
        </div>

        <div class="pagination">{{ $tokens->links() }}</div>
    </div>
@endsection