@extends('providers.layout')

@section('title', 'Integrations')

@section('content')
<section class="space-y-8">
    <header>
        <h1 class="text-2xl font-semibold">Provider integrations</h1>
        <p class="mt-1 text-sm text-slate-600">Credentials are encrypted at rest. A configured provider is not verified until it completes a real operation.</p>
        <p><a href="{{ route('admin.integrations.reconciliation.index') }}">Review held Stripe payments</a></p>
    </header>

    @if (session('status')) <p class="rounded bg-green-50 p-3 text-sm text-green-800">{{ session('status') }}</p> @endif
    @if ($errors->any()) <div class="rounded bg-red-50 p-3 text-sm text-red-800"><ul>@foreach ($errors->all() as $error)<li>{{ $error }}</li>@endforeach</ul></div> @endif

    <form method="POST" action="{{ route('admin.integrations.update') }}" class="space-y-7">
        @csrf @method('PUT')
        <fieldset class="space-y-3 rounded border p-4">
            <legend class="px-1 font-medium">Resend email — {{ $configured['resend'] ? 'Configured (not verified)' : 'Not configured / disabled' }}</legend>
            <p class="text-sm text-slate-600">Used only for email messages sent from an order communication thread.</p>
            <div><label for="resend_from">Verified sender address</label><input id="resend_from" name="resend_from" type="email" value="{{ old('resend_from', $values['resend_from']) }}"></div>
            <div><label for="resend_api_key">API key</label><input id="resend_api_key" name="resend_api_key" type="password" placeholder="{{ $values['resend_api_key_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="resend_api_key"> Clear saved API key</label></div>
        </fieldset>

        <fieldset class="space-y-3 rounded border p-4">
            <legend class="px-1 font-medium">Twilio WhatsApp — {{ $configured['twilio_whatsapp'] ? 'Configured (not verified)' : 'Not configured / disabled' }}</legend>
            <p class="text-sm text-slate-600">Use an approved WhatsApp sender number in international format.</p>
            <div><label for="twilio_whatsapp_from">WhatsApp sender number</label><input id="twilio_whatsapp_from" name="twilio_whatsapp_from" value="{{ old('twilio_whatsapp_from', $values['twilio_whatsapp_from']) }}" placeholder="+15551234567"></div>
            <p class="text-sm text-slate-600">SMS uses the same Twilio credentials and a standard SMS-capable sender number.</p>
            <div><label for="twilio_sms_from">SMS sender number — {{ $configured['twilio_sms'] ? 'Configured (not verified)' : 'Not configured / disabled' }}</label><input id="twilio_sms_from" name="twilio_sms_from" value="{{ old('twilio_sms_from', $values['twilio_sms_from']) }}" placeholder="+15551234567"></div>
            <div><label for="twilio_account_sid">Account SID</label><input id="twilio_account_sid" name="twilio_account_sid" type="password" placeholder="{{ $values['twilio_account_sid_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="twilio_account_sid"> Clear saved Account SID</label></div>
            <div><label for="twilio_auth_token">Auth token</label><input id="twilio_auth_token" name="twilio_auth_token" type="password" placeholder="{{ $values['twilio_auth_token_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="twilio_auth_token"> Clear saved auth token</label></div>
        </fieldset>

        <fieldset class="space-y-3 rounded border p-4">
            <legend class="px-1 font-medium">OpenAI — {{ $configured['openai'] ? 'Configured (not verified)' : 'Not configured / disabled' }}</legend>
            <p class="text-sm text-slate-600">Responses are non-streaming and capped. This form does not submit a test prompt.</p>
            <div><label for="openai_model">Model</label><input id="openai_model" name="openai_model" value="{{ old('openai_model', $values['openai_model']) }}" placeholder="gpt-4o-mini"></div>
            <div><label for="openai_api_key">API key</label><input id="openai_api_key" name="openai_api_key" type="password" placeholder="{{ $values['openai_api_key_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="openai_api_key"> Clear saved API key</label></div>
        </fieldset>

        <fieldset class="space-y-3 rounded border p-4">
            <legend class="px-1 font-medium">Stripe payments — {{ $configured['stripe'] ? 'Configured (not verified)' : 'Not configured / disabled' }}</legend>
            <p class="text-sm text-slate-600">The webhook signing secret is required. The current public invoice screen is backend-only and does not expose a card-entry form.</p>
            <div><label for="stripe_publishable_key">Publishable key</label><input id="stripe_publishable_key" name="stripe_publishable_key" type="password" placeholder="{{ $values['stripe_publishable_key_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="stripe_publishable_key"> Clear saved publishable key</label></div>
            <div><label for="stripe_secret_key">Secret key</label><input id="stripe_secret_key" name="stripe_secret_key" type="password" placeholder="{{ $values['stripe_secret_key_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="stripe_secret_key"> Clear saved secret key</label></div>
            <div><label for="stripe_webhook_secret">Webhook signing secret</label><input id="stripe_webhook_secret" name="stripe_webhook_secret" type="password" placeholder="{{ $values['stripe_webhook_secret_masked'] ?? 'Not saved' }}" autocomplete="new-password"><label><input type="checkbox" name="clear_secrets[]" value="stripe_webhook_secret"> Clear saved webhook secret</label></div>
        </fieldset>
        <button type="submit">Save integration settings</button>
    </form>

    <aside class="rounded border border-amber-200 bg-amber-50 p-4 text-sm text-amber-900">
        <strong>Portability inventory.</strong> Adapters currently cover Resend email, Twilio SMS and WhatsApp, OpenAI chat completions, and Stripe Payment Intents/webhook recording through REST. SMTP remains Laravel mail configuration. Inbound messaging, delivery-status callbacks, recurring billing, refunds, Stripe Connect payouts, and a Stripe.js card collection UI are intentionally not implemented.
    </aside>
</section>
@endsection