@php
    $coverage = $dashboard['coverage'] ?? [];
    $phrases = \App\Http\Requests\Admin\Security\ConfirmDangerZoneActionRequest::PHRASES;
@endphp

<div class="row match-height">
    <div class="col-lg-8 col-12">
        <div class="card border h-100">
            <div class="card-header">
                <h4 class="card-title mb-0">Priority risk queue</h4>
            </div>
            <div class="card-body">
                <p class="text-muted">Recent watch / warn / critical security events that need attention.</p>
                <div class="table-responsive">
                    <table class="table table-hover">
                        <thead>
                        <tr>
                            <th>Severity</th>
                            <th>Event</th>
                            <th>Owner</th>
                            <th>When</th>
                        </tr>
                        </thead>
                        <tbody>
                        @forelse($risks as $risk)
                            @php
                                $severity = $risk['severity'] ?? 'watch';
                                $badge = match ($severity) {
                                    'critical' => 'danger',
                                    'warn' => 'warning',
                                    default => 'info',
                                };
                            @endphp
                            <tr>
                                <td>
                                    <span class="badge rounded-pill badge-light-{{ $badge }} text-uppercase">
                                        {{ $severity }}
                                    </span>
                                </td>
                                <td>
                                    <code>{{ $risk['event'] ?? '—' }}</code>
                                </td>
                                <td>{{ $risk['owner'] ?? ($risk['actor'] ?? 'System') }}</td>
                                <td>
                                    @if(! empty($risk['created_at']))
                                        {{ \Illuminate\Support\Carbon::parse($risk['created_at'])->diffForHumans() }}
                                    @else
                                        —
                                    @endif
                                </td>
                            </tr>
                        @empty
                            <tr>
                                <td colspan="4" class="text-center text-muted py-2">
                                    No open risks in the recent audit window.
                                </td>
                            </tr>
                        @endforelse
                        </tbody>
                    </table>
                </div>
            </div>
        </div>
    </div>

    <div class="col-lg-4 col-12">
        <div class="card border h-100">
            <div class="card-header">
                <h4 class="card-title mb-0">Control coverage</h4>
            </div>
            <div class="card-body">
                @forelse($coverage as $item)
                    @php
                        $percent = (int) ($item['percent'] ?? 0);
                        $barTone = $percent >= 80 ? 'success' : ($percent >= 50 ? 'warning' : 'danger');
                    @endphp
                    <div class="mb-2">
                        <div class="d-flex justify-content-between mb-50">
                            <span>{{ $item['label'] ?? 'Control' }}</span>
                            <small class="text-muted">{{ $item['met'] ?? 0 }}/{{ $item['total'] ?? 0 }} · {{ $percent }}%</small>
                        </div>
                        <div class="progress progress-bar-{{ $barTone }}" style="height: 8px;">
                            <div class="progress-bar bg-{{ $barTone }}"
                                 role="progressbar"
                                 style="width: {{ $percent }}%"
                                 aria-valuenow="{{ $percent }}"
                                 aria-valuemin="0"
                                 aria-valuemax="100"></div>
                        </div>
                    </div>
                @empty
                    <p class="text-muted mb-0">Coverage metrics unavailable.</p>
                @endforelse
            </div>
        </div>
    </div>
</div>

<div class="row match-height mt-1">
    <div class="col-lg-6 col-12">
        <div class="card border h-100">
            <div class="card-header">
                <h4 class="card-title mb-0">CAPTCHA &amp; login hardening</h4>
            </div>
            <div class="card-body">
                <p class="mb-1">
                    reCAPTCHA site/secret keys and login CAPTCHA toggles live under Authentication settings.
                </p>
                <a href="{{ route('admin.settings.general') }}" class="btn btn-outline-primary">
                    <i data-feather="external-link" class="me-25"></i>
                    Open authentication settings
                </a>
                <p class="text-muted small mt-1 mb-0">
                    Tip: after opening Settings, switch to the Authentication tab to manage CAPTCHA.
                </p>
            </div>
        </div>
    </div>

    <div class="col-lg-6 col-12">
        <div class="card border border-danger h-100">
            <div class="card-header">
                <h4 class="card-title text-danger mb-0">Quick incident actions</h4>
            </div>
            <div class="card-body">
                <p class="text-muted">These require typing a confirmation phrase. Prefer the Danger Zone tab for full context.</p>
                <div class="d-flex flex-wrap gap-50">
                    <button type="button" class="btn btn-outline-danger" data-bs-toggle="modal" data-bs-target="#summaryRevokeSessionsModal">
                        Revoke all sessions
                    </button>
                    <button type="button" class="btn btn-outline-warning" data-bs-toggle="modal" data-bs-target="#summaryEmergencyStopModal">
                        Emergency stop outbound
                    </button>
                    <a href="{{ route('admin.settings.security', ['tab' => 'danger']) }}" class="btn btn-outline-secondary">
                        Open danger zone
                    </a>
                </div>
            </div>
        </div>
    </div>
</div>

{{-- Quick action modals --}}
<div class="modal fade" id="summaryRevokeSessionsModal" tabindex="-1" aria-hidden="true">
    <div class="modal-dialog modal-dialog-centered">
        <form class="modal-content" method="post" action="{{ route('admin.settings.security.danger', ['action' => 'revoke-sessions']) }}">
            @csrf
            <div class="modal-header">
                <h5 class="modal-title">Revoke all sessions</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
            </div>
            <div class="modal-body">
                <p>Signs out every active session. Type <strong>{{ $phrases['revoke-sessions'] }}</strong> to confirm.</p>
                <input type="text" name="confirmation" class="form-control" placeholder="{{ $phrases['revoke-sessions'] }}" required autocomplete="off">
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal">Cancel</button>
                <button type="submit" class="btn btn-danger">Confirm revoke</button>
            </div>
        </form>
    </div>
</div>

<div class="modal fade" id="summaryEmergencyStopModal" tabindex="-1" aria-hidden="true">
    <div class="modal-dialog modal-dialog-centered">
        <form class="modal-content" method="post" action="{{ route('admin.settings.security.danger', ['action' => 'emergency-stop']) }}">
            @csrf
            <div class="modal-header">
                <h5 class="modal-title">Emergency stop outbound</h5>
                <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
            </div>
            <div class="modal-body">
                <p>Halts outbound messaging platform-wide. Type <strong>{{ $phrases['emergency-stop'] }}</strong> to confirm.</p>
                <input type="text" name="confirmation" class="form-control" placeholder="{{ $phrases['emergency-stop'] }}" required autocomplete="off">
            </div>
            <div class="modal-footer">
                <button type="button" class="btn btn-outline-secondary" data-bs-dismiss="modal">Cancel</button>
                <button type="submit" class="btn btn-danger">Engage emergency stop</button>
            </div>
        </form>
    </div>
</div>