@php
    /**
     * The menu is generated from the same permissions the routes enforce, so it
     * can never offer a link the request would then reject. Sections disappear
     * entirely when a user holds none of their permissions.
     */
    use App\Support\Permissions;

    $nav = [
        'Overview' => [
            ['label' => 'Dashboard', 'icon' => 'fa-gauge-high', 'url' => url('/dashboard'), 'path' => 'dashboard', 'can' => null],
        ],
        'Members' => [
            ['label' => 'Active Members', 'icon' => 'fa-user-check', 'url' => url('/members/1/activity'), 'path' => 'members/1/activity', 'can' => Permissions::MEMBERS_VIEW],
            ['label' => 'Inactive Members', 'icon' => 'fa-user-clock', 'url' => url('/members/0/activity'), 'path' => 'members/0/activity', 'can' => Permissions::MEMBERS_VIEW],
            ['label' => 'All Members', 'icon' => 'fa-users', 'url' => url('/members'), 'path' => 'members', 'can' => Permissions::MEMBERS_VIEW],
            ['label' => 'Add New Member', 'icon' => 'fa-user-plus', 'url' => url('/members/create'), 'path' => 'members/create', 'can' => Permissions::MEMBERS_CREATE],
        ],
        'Executives' => [
            ['label' => 'Executive List', 'icon' => 'fa-user-tie', 'url' => url('/executives'), 'path' => 'executives', 'can' => Permissions::EXECUTIVES_VIEW],
            ['label' => 'Add Executive', 'icon' => 'fa-user-plus', 'url' => url('/executives/create'), 'path' => 'executives/create', 'can' => Permissions::EXECUTIVES_CREATE],
        ],
        'Finance Reports' => [
            ['label' => 'Date Range Transactions', 'icon' => 'fa-calendar-days', 'url' => url('/transactionreport'), 'path' => 'transactionreport', 'can' => Permissions::REPORTS_FINANCE],
            ['label' => 'Daily Transactions', 'icon' => 'fa-receipt', 'url' => url('/dailytransactionreport'), 'path' => 'dailytransactionreport', 'can' => Permissions::REPORTS_FINANCE],
            ['label' => 'Member Due List', 'icon' => 'fa-hand-holding-dollar', 'url' => url('/due-transaction-report'), 'path' => 'due-transaction-report', 'can' => Permissions::REPORTS_FINANCE],
            ['label' => 'Member Transactions', 'icon' => 'fa-money-bill-transfer', 'url' => url('/membertransactionreport'), 'path' => 'membertransactionreport', 'can' => Permissions::REPORTS_FINANCE],
        ],
        'Attendance Reports' => [
            ['label' => 'Member Daily', 'icon' => 'fa-clipboard-user', 'url' => url('/dailyattendancereport/2'), 'path' => 'dailyattendancereport/2', 'can' => Permissions::REPORTS_ATTENDANCE],
            ['label' => 'Member Wise', 'icon' => 'fa-user-clock', 'url' => url('/employeewiseattendance/2'), 'path' => 'employeewiseattendance/2', 'can' => Permissions::REPORTS_ATTENDANCE],
            ['label' => 'Executive Daily', 'icon' => 'fa-clipboard-list', 'url' => url('/dailyattendancereport/1'), 'path' => 'dailyattendancereport/1', 'can' => Permissions::REPORTS_ATTENDANCE],
            ['label' => 'Executive Wise', 'icon' => 'fa-user-shield', 'url' => url('/employeewiseattendance/1'), 'path' => 'employeewiseattendance/1', 'can' => Permissions::REPORTS_ATTENDANCE],
        ],
        'Administration' => [
            ['label' => 'System Users', 'icon' => 'fa-user-gear', 'url' => url('/users'), 'path' => 'users', 'can' => Permissions::USERS_VIEW],
            ['label' => 'Roles & Permissions', 'icon' => 'fa-shield-halved', 'url' => url('/roles'), 'path' => 'roles', 'can' => Permissions::ROLES_MANAGE],
            ['label' => 'Audit Trail', 'icon' => 'fa-clipboard-check', 'url' => url('/audit-log'), 'path' => 'audit-log', 'can' => Permissions::AUDIT_VIEW],
        ],
        'System' => [
            ['label' => 'Sync Device Data', 'icon' => 'fa-fingerprint', 'url' => url('/zklist'), 'path' => 'zklist', 'can' => Permissions::DEVICE_SYNC],
            ['label' => 'Change Password', 'icon' => 'fa-key', 'url' => url('/change_password'), 'path' => 'change_password', 'can' => null],
        ],
    ];
@endphp

<aside class="sidebar" id="sidebar">
    <a class="sidebar__brand" href="{{ url('/dashboard') }}">
        <span class="sidebar__logo" aria-hidden="true"><i class="fa-solid fa-dumbbell"></i></span>
        <span class="sidebar__brand-text">
            <span class="sidebar__brand-name">{{ config('company.short_name') }}</span>
            <span class="sidebar__brand-sub">{{ config('company.name') }}</span>
        </span>
    </a>

    <nav class="sidebar__nav" aria-label="Main navigation">
        @foreach ($nav as $section => $items)
            @php
                $visible = array_values(array_filter(
                    $items,
                    fn ($item) => $item['can'] === null || auth()->user()?->hasPermission($item['can'])
                ));
            @endphp

            @if ($visible)
                <p class="sidebar__section">{{ $section }}</p>
                <ul class="sidebar__list">
                    @foreach ($visible as $item)
                        <li>
                            <a
                                class="sidebar__link"
                                href="{{ $item['url'] }}"
                                @if (request()->fullUrlIs($item['url']) || request()->is($item['path'])) aria-current="page" @endif
                            >
                                <span class="sidebar__icon" aria-hidden="true"><i class="fa-solid {{ $item['icon'] }}"></i></span>
                                <span class="sidebar__label">{{ $item['label'] }}</span>
                            </a>
                        </li>
                    @endforeach
                </ul>
            @endif
        @endforeach
    </nav>

    <div class="sidebar__footer">
        {{ config('company.name') }} Management System
    </div>
</aside>