<%!-- Header Section --%>
<%!-- Back Button (Left aligned) --%> <.link navigate={PhoenixKit.Utils.Routes.path("/admin")} class="btn btn-outline btn-primary btn-sm" > <.icon name="hero-arrow-left" class="w-4 h-4 mr-2" /> {gettext("Back to Dashboard")} <%!-- Title Section --%>

{gettext("Role Management")}

{gettext("Create and manage user roles")}

<%!-- Action Button --%>
<%!-- Create Role Modal --%> <.modal show={@show_create_form} on_close="hide_form" max_width="2xl"> <:title>{gettext("Create New Role")}
<.input field={@create_role_form[:name]} label={gettext("Role Name *")} placeholder={gettext("Enter role name (e.g., Manager, Editor)")} maxlength="50" required />

{gettext("Must be unique, 1-50 characters.")}

<.textarea field={@create_role_form[:description]} label={gettext("Description")} placeholder={gettext("Describe what this role can do (optional)")} maxlength="500" />

{gettext("Optional, up to 500 characters.")}

<:actions> <%!-- Edit Role Modal --%> <.modal show={@show_edit_form} on_close="hide_form" max_width="2xl"> <:title>{gettext("Edit Role")}
<.input field={@edit_role_form[:name]} label={gettext("Role Name *")} placeholder={gettext("Enter role name (e.g., Manager, Editor)")} maxlength="50" required />

{gettext("Must be unique, 1-50 characters.")}

<.textarea field={@edit_role_form[:description]} label={gettext("Description")} placeholder={gettext("Describe what this role can do (optional)")} maxlength="500" />

{gettext("Optional, up to 500 characters.")}

<:actions> <%!-- Roles List --%>
<%= if length(@roles) > 0 do %> <.table_default variant="zebra"> <.table_default_header> <.table_default_row> <.table_default_header_cell>{gettext("Role")} <.table_default_header_cell>{gettext("Type")} <.table_default_header_cell>{gettext("Description")} <.table_default_header_cell>{gettext("Users")} <.table_default_header_cell>{gettext("Actions")} <.table_default_body> <%= for role <- @roles do %> <.table_default_row> <.table_default_cell>
<.role_badge role={role} />
<.table_default_cell> <%= if role.is_system_role do %> {gettext("System Role")} <% else %> {gettext("Custom Role")} <% end %> <.table_default_cell class="max-w-xs">
<%= if role.description do %> {role.description} <% else %> {gettext("No description")} <% end %>
<.table_default_cell>
<.users_count role={role} stats={@role_stats} /> {gettext("users")}
<.table_default_cell>
<%= if !role.is_system_role do %> <%!-- Edit Button --%> <%!-- Delete Button --%> <% else %> {gettext("Protected")} <% end %> <%!-- Permissions Button (users permission required, editable roles only) --%> <%= if assigns[:phoenix_kit_current_scope] && PhoenixKit.Users.Auth.Scope.has_module_access?(assigns[:phoenix_kit_current_scope], "users") && !MapSet.member?(@uneditable_role_uuids, to_string(role.uuid)) do %> <% end %>
<% end %> <% else %> <%!-- Empty state --%>
<.icon name="hero-shield-check" class="h-16 w-16 mx-auto text-base-content/40 mb-4" />

{gettext("No roles found")}

{gettext("Start by creating your first custom role.")}

<% end %>
<%!-- Role Statistics --%>

{gettext("Role Statistics")}

<%!-- System Roles Count --%> <:icon> <.icon name="hero-lock-closed" class="w-5 h-5" /> <%!-- Custom Roles Count --%> <:icon> <.icon name="hero-cog-6-tooth" class="w-5 h-5" /> <%!-- Total Roles Count --%> <:icon> <.icon name="hero-chart-bar" class="w-5 h-5" />
<%!-- Delete Confirmation Modal --%> <.confirm_modal show={assigns[:delete_confirmation] && @delete_confirmation.show} on_confirm="confirm_delete_role" on_cancel="cancel_delete" title={gettext("Delete Role")} title_icon="hero-trash" danger={true} messages={[ {:warning, gettext( "Are you sure you want to delete the role \"%{role_name}\"? This action cannot be undone.", role_name: Map.get(@delete_confirmation, :role_name, "") )} ]} confirm_text={gettext("Delete Role")} /> <%!-- Permissions Editor Modal --%> <.modal show={@show_permissions_editor && @permissions_role != nil} on_close="hide_permissions_editor" max_width="3xl" > <:title> {gettext("Permissions for")} <.role_badge role={@permissions_role || %{name: "", is_system_role: false}} />

{gettext( "Select which sections and modules this role can access. You can only grant permissions that your own role has." )}

<%!-- Quick Actions --%>
<%!-- Core Sections --%>

{gettext("Core Sections")}

<%= for key <- PhoenixKit.Users.Permissions.core_section_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
<%!-- Feature Modules --%>

{gettext("Feature Modules")}

<%= for key <- PhoenixKit.Users.Permissions.feature_module_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
<%!-- Custom (permission keys registered by parent app) --%> <%= if length(PhoenixKit.Users.Permissions.custom_keys()) > 0 do %>

{gettext("Custom")}

<%= for key <- PhoenixKit.Users.Permissions.custom_keys(), MapSet.member?(@permissions_grantable_keys, key) do %> <% end %>
<% end %> <%!-- Summary --%>
{gettext("%{granted} of %{total} manageable permissions granted", granted: MapSet.size(@permissions_role_keys), total: MapSet.size(@permissions_grantable_keys) )} <%= if MapSet.size(@permissions_preserved_keys) > 0 do %> {gettext("(%{count} for disabled modules, preserved on save)", count: MapSet.size(@permissions_preserved_keys) )} <% end %>
<:actions>