{{--
    Shared user form.

    @param \App\Models\User|null $user  Null when creating.
    @param \Illuminate\Support\Collection $roles
--}}
@php($editing = isset($user))

<div class="mb-3">
    <label for="name" class="form-label">Nome</label>
    <input id="name" type="text" name="name"
           value="{{ old('name', $editing ? $user->name : '') }}"
           class="form-control @error('name') is-invalid @enderror" required>
    @error('name')<div class="invalid-feedback">{{ $message }}</div>@enderror
</div>

<div class="mb-3">
    <label for="email" class="form-label">E-mail</label>
    <input id="email" type="email" name="email"
           value="{{ old('email', $editing ? $user->email : '') }}"
           class="form-control @error('email') is-invalid @enderror" required>
    @error('email')<div class="invalid-feedback">{{ $message }}</div>@enderror
</div>

<div class="mb-3">
    <label for="password" class="form-label">
        Senha
        @if ($editing)
            <span class="text-body-secondary fw-normal">(deixe em branco para manter a atual)</span>
        @endif
    </label>
    <input id="password" type="password" name="password" autocomplete="new-password"
           class="form-control @error('password') is-invalid @enderror" @unless ($editing) required @endunless>
    @error('password')<div class="invalid-feedback">{{ $message }}</div>@enderror
    <div class="form-text">Mínimo de 8 caracteres, com letras e números.</div>
</div>

<div class="mb-3">
    <label for="password_confirmation" class="form-label">Confirmar senha</label>
    <input id="password_confirmation" type="password" name="password_confirmation"
           autocomplete="new-password" class="form-control" @unless ($editing) required @endunless>
</div>

<div class="mb-3">
    <label for="role_id" class="form-label">Perfil de acesso</label>
    <select id="role_id" name="role_id" class="form-select @error('role_id') is-invalid @enderror" required
            @if ($editing && auth()->id() === $user->id) disabled @endif>
        <option value="">Selecione…</option>
        @foreach ($roles as $role)
            <option value="{{ $role->id }}"
                @selected(old('role_id', $editing ? $user->role_id : null) == $role->id)>
                {{ $role->name }}
            </option>
        @endforeach
    </select>
    @error('role_id')<div class="invalid-feedback">{{ $message }}</div>@enderror

    @if ($editing && auth()->id() === $user->id)
        {{-- Mirrors UserPolicy::updateRole: changing your own role could strip
             the very permission needed to undo the change. --}}
        <div class="form-text">Você não pode alterar o seu próprio perfil de acesso.</div>
    @endif
</div>

@php($editingSelf = $editing && auth()->id() === $user->id)

<div class="form-check form-switch mb-4">
    {{-- An unchecked checkbox submits nothing, so without this hidden field
         "active" would be absent from the payload and the `sometimes` rule
         would skip it — deactivating a user would silently do nothing.
         It is omitted when editing yourself, where the checkbox is disabled:
         posting 0 there would attempt the very self-deactivation the policy
         forbids. --}}
    @unless ($editingSelf)
        <input type="hidden" name="active" value="0">
    @endunless

    <input id="active" class="form-check-input" type="checkbox" name="active" value="1"
           @checked(old('active', $editing ? $user->active : true))
           @if ($editingSelf) disabled @endif>
    <label for="active" class="form-check-label">Usuário ativo</label>

    @if ($editingSelf)
        <div class="form-text">Você não pode desativar o seu próprio usuário.</div>
    @endif
</div>