{{--
    Reusable admin-password confirmation modal for destructive delete actions.

    Usage:
      1. Include once at the bottom of @section('content'):
         @include('partials._admin-password-modal')

      2. Trigger with a button (no form needed on the page):
         <button type="button"
                 class="btn btn-outline-danger btn-sm"
                 data-bs-toggle="modal"
                 data-bs-target="#adminPasswordModal"
                 data-action="{{ route('admin.xxx.destroy', $model) }}"
                 data-label="Delete &quot;{{ $model->title }}&quot;">
             <i class="bi bi-trash me-1"></i>Delete
         </button>
--}}
<div class="modal fade" id="adminPasswordModal" tabindex="-1" aria-labelledby="adminPasswordModalLabel" aria-modal="true">
    <div class="modal-dialog">
        <div class="modal-content border-0 shadow">
            <div class="modal-header border-0 pb-0">
                <h6 class="modal-title fw-semibold text-danger" id="adminPasswordModalLabel">
                    <i class="bi bi-shield-exclamation me-2"></i>Confirm Deletion
                </h6>
                <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
            </div>
            <form method="POST" id="adminPasswordForm" action="">
                @csrf
                @method('DELETE')
                <input type="hidden" name="admin_password" id="adminPasswordHidden">
                <div class="modal-body pt-2">
                    <div class="alert alert-danger border-0 bg-danger bg-opacity-10 text-danger small mb-3 py-2" id="adminPasswordModalLabel">
                        <i class="bi bi-exclamation-triangle me-1"></i>
                        <span id="adminPasswordDeleteLabel">This action is permanent and cannot be undone.</span>
                    </div>
                    <p class="text-muted small mb-3">Please enter the Admin password to authorise this deletion.</p>
                    <div>
                        <label class="form-label fw-medium">Admin Password <span class="text-danger">*</span></label>
                        <input type="password" id="adminPasswordInput"
                               class="form-control"
                               placeholder="Enter admin password"
                               autocomplete="off" required>
                        <div class="invalid-feedback" id="adminPasswordFeedback">Incorrect admin password.</div>
                    </div>
                </div>
                <div class="modal-footer border-0 pt-0">
                    <button type="button" class="btn btn-light" data-bs-dismiss="modal">Cancel</button>
                    <button type="submit" class="btn btn-danger" id="adminPasswordConfirmBtn">
                        <i class="bi bi-trash me-1"></i>Confirm Delete
                    </button>
                </div>
            </form>
        </div>
    </div>
</div>

@push('scripts')
<script>
(function () {
    var modal = document.getElementById('adminPasswordModal');
    if (! modal) return;

    // Populate action and label when modal opens
    modal.addEventListener('show.bs.modal', function (e) {
        var trigger = e.relatedTarget;
        if (! trigger) return;
        document.getElementById('adminPasswordForm').action = trigger.dataset.action || '';
        var label = trigger.dataset.label;
        if (label) {
            document.getElementById('adminPasswordDeleteLabel').textContent = label + ' — this action is permanent and cannot be undone.';
        }
        // Clear previous error state on fresh open
        document.getElementById('adminPasswordInput').value = '';
        document.getElementById('adminPasswordInput').classList.remove('is-invalid');
        document.getElementById('adminPasswordFeedback').textContent = 'Incorrect admin password.';
    });

    // Focus password field once visible
    modal.addEventListener('shown.bs.modal', function () {
        document.getElementById('adminPasswordInput').focus();
    });

    // Copy visible password to hidden field on submit so the form POSTs it
    document.getElementById('adminPasswordForm').addEventListener('submit', function (e) {
        var pw = document.getElementById('adminPasswordInput').value;
        if (! pw) {
            e.preventDefault();
            document.getElementById('adminPasswordFeedback').textContent = 'Please enter the admin password.';
            document.getElementById('adminPasswordInput').classList.add('is-invalid');
            return;
        }
        document.getElementById('adminPasswordHidden').value = pw;
    });

    @if(session('admin_password_error'))
    // Re-open modal with error after a failed password attempt.
    // Restore the form action from the session so the retry submits to the correct URL.
    var bsModal = new bootstrap.Modal(modal);
    document.getElementById('adminPasswordForm').action = '{{ session('admin_password_error_action', '') }}';
    document.getElementById('adminPasswordFeedback').textContent = '{{ session('admin_password_error') }}';
    document.getElementById('adminPasswordInput').classList.add('is-invalid');
    bsModal.show();
    @endif
}());
</script>
@endpush