@php
    $hiddenUserId = (auth()->user()->isWebmasterOrAdmin() && $user->id !== auth()->id()) ? $user->id : null;
@endphp

@if($telegramConfig->isAuthenticated() && ($tgStep ?? null) !== 'code' && ($tgStep ?? null) !== '2fa')
    <div class="alert alert-success py-2 mb-3">
        <i class="bi bi-check-circle me-2"></i>
        <strong>Autenticado</strong> — sessão ativa
        @if($telegramConfig->authenticated_at)
            <span class="text-muted small">(desde {{ $telegramConfig->authenticated_at->diffForHumans() }})</span>
        @endif
    </div>
    <form action="{{ route('admin.setup.restartTelegram') }}" method="POST" class="mb-3"
          onsubmit="return tgConfirmRestart(this, 'Isso apaga a sessão no servidor e exige novo login no Telegram. Continuar?')">
        @csrf
        @if($hiddenUserId)<input type="hidden" name="user_id" value="{{ $hiddenUserId }}">@endif
        <button type="submit" class="btn btn-sm btn-outline-danger" id="tgRestartBtn1">
            <i class="bi bi-arrow-repeat me-1"></i>Reiniciar sessão Telegram
        </button>
    </form>
@elseif(($tgStep ?? null) === 'code')
    <div class="alert alert-info mb-3">
        <p class="fw-semibold mb-2"><i class="bi bi-phone me-1"></i>Código enviado para {{ $telegramConfig->phone }}</p>
        <form action="{{ route('admin.setup.confirmTelegramCode') }}" method="POST" class="d-flex flex-wrap gap-2 align-items-center"
              onsubmit="tgSetLoading(this, 'Confirmando...')">
            @csrf
            @if($hiddenUserId)<input type="hidden" name="user_id" value="{{ $hiddenUserId }}">@endif
            <input type="text" name="code" class="form-control" style="max-width:140px" placeholder="12345" maxlength="10" autofocus required>
            <button type="submit" class="btn btn-primary">Confirmar código</button>
        </form>
    </div>
@elseif(($tgStep ?? null) === '2fa')
    <div class="alert alert-warning mb-3">
        <p class="fw-semibold mb-2"><i class="bi bi-shield-lock me-1"></i>Verificação em duas etapas</p>
        <form action="{{ route('admin.setup.confirmTelegram2fa') }}" method="POST" class="d-flex flex-wrap gap-2 align-items-center"
              onsubmit="tgSetLoading(this, 'Verificando...')">
            @csrf
            @if($hiddenUserId)<input type="hidden" name="user_id" value="{{ $hiddenUserId }}">@endif
            <input type="password" name="password_2fa" class="form-control" style="max-width:220px" placeholder="Senha do Telegram" autofocus required>
            <button type="submit" class="btn btn-warning">Confirmar senha</button>
        </form>
    </div>
@elseif($telegramConfig->isConfigured())
    <div class="alert alert-warning py-2 mb-3 d-flex flex-wrap align-items-center justify-content-between gap-2">
        <span><i class="bi bi-clock me-2"></i><strong>Configurado, aguardando login</strong></span>
        <div class="d-flex flex-wrap gap-2">
            <form action="{{ route('admin.setup.requestTelegramCode') }}" method="POST"
                  onsubmit="tgSetLoading(this, 'Enviando código...')">
                @csrf
                @if($hiddenUserId)<input type="hidden" name="user_id" value="{{ $hiddenUserId }}">@endif
                <button type="submit" class="btn btn-sm btn-primary">
                    <i class="bi bi-send me-1"></i>Enviar código
                </button>
            </form>
            <form action="{{ route('admin.setup.restartTelegram') }}" method="POST"
                  onsubmit="return tgConfirmRestart(this, 'Limpar sessão e solicitar novo código?')">
                @csrf
                @if($hiddenUserId)<input type="hidden" name="user_id" value="{{ $hiddenUserId }}">@endif
                <button type="submit" class="btn btn-sm btn-outline-danger">
                    <i class="bi bi-arrow-repeat me-1"></i>Reiniciar sessão
                </button>
            </form>
        </div>
    </div>
@else
    <div class="alert alert-secondary py-2 mb-3">
        <i class="bi bi-exclamation-circle me-2"></i>
        Não configurado. Obtenha suas credenciais em
        <a href="https://my.telegram.org/auth" target="_blank">my.telegram.org</a>
        → API development tools.
    </div>
@endif

<script>
function tgSetLoading(form, label) {
    const btn = form.querySelector('button[type="submit"]');
    if (btn) {
        btn.disabled = true;
        btn.innerHTML = '<span class="spinner-border spinner-border-sm me-1"></span>' + label;
    }
}

function tgConfirmRestart(form, msg) {
    if (!confirm(msg)) return false;
    const btn = form.querySelector('button[type="submit"]');
    if (btn) {
        btn.disabled = true;
        btn.innerHTML = '<span class="spinner-border spinner-border-sm me-1"></span>Reiniciando...';
    }
    return true;
}
</script>