@php
    $mpinSet = ! empty($user->chat_password_hash);
    $mpinEnabled = (bool) $user->chat_password_enabled && $mpinSet;
@endphp

<section class="settings-card settings-mpin-card" id="settings-mpin" data-mpin-url="{{ route('gc.settings.mpin.update') }}">
    <div class="settings-card-head">
        <h3 class="settings-card-title">Chat MPIN</h3>
        <p class="settings-card-desc">Protect chat with a 4-digit MPIN before opening messages.</p>
    </div>

    <form method="POST" action="{{ route('gc.settings.mpin.update') }}" class="settings-form settings-mpin-toggle-form" data-mpin-toggle-form>
        @csrf
        <input type="hidden" name="action" value="toggle">
        <input type="hidden" name="enabled" value="{{ $mpinEnabled ? '0' : '1' }}" data-mpin-enabled-input>
        @include('settings.partials.toggle-row', [
            'name' => 'mpin_enabled_ui',
            'label' => 'Chat MPIN lock',
            'checked' => $mpinEnabled,
            'disabled' => ! $mpinSet,
            'hint' => $mpinEnabled ? 'Required before opening chat' : ($mpinSet ? 'MPIN saved, protection off' : 'Create MPIN below first'),
        ])
        <div class="settings-mpin-disable hidden" data-mpin-disable-panel>
            <label class="settings-field">
                <span>Current MPIN</span>
                <input type="password" name="current_mpin" inputmode="numeric" pattern="[0-9]{4}" maxlength="4" autocomplete="off" placeholder="••••">
            </label>
            <button type="submit" class="settings-btn-secondary full">Confirm disable</button>
        </div>
    </form>

    @if(! $mpinSet)
        <form method="POST" action="{{ route('gc.settings.mpin.update') }}" class="settings-form settings-mpin-form">
            @csrf
            <input type="hidden" name="action" value="set">
            <p class="settings-section-label">Create MPIN</p>
            <label class="settings-field">
                <span>New 4-digit MPIN</span>
                <input type="password" name="mpin" inputmode="numeric" pattern="[0-9]{4}" maxlength="4" required autocomplete="new-password" placeholder="••••">
            </label>
            <label class="settings-field">
                <span>Confirm MPIN</span>
                <input type="password" name="mpin_confirmation" inputmode="numeric" pattern="[0-9]{4}" maxlength="4" required autocomplete="new-password" placeholder="••••">
            </label>
            <button type="submit" class="settings-btn-primary full">Save MPIN</button>
        </form>
    @else
        <form method="POST" action="{{ route('gc.settings.mpin.update') }}" class="settings-form settings-mpin-form">
            @csrf
            <input type="hidden" name="action" value="change">
            <p class="settings-section-label">Change MPIN</p>
            <label class="settings-field">
                <span>Current MPIN</span>
                <input type="password" name="current_mpin" inputmode="numeric" pattern="[0-9]{4}" maxlength="4" required autocomplete="off" placeholder="••••">
            </label>
            <label class="settings-field">
                <span>New 4-digit MPIN</span>
                <input type="password" name="mpin" inputmode="numeric" pattern="[0-9]{4}" maxlength="4" required autocomplete="new-password" placeholder="••••">
            </label>
            <label class="settings-field">
                <span>Confirm new MPIN</span>
                <input type="password" name="mpin_confirmation" inputmode="numeric" pattern="[0-9]{4}" maxlength="4" required autocomplete="new-password" placeholder="••••">
            </label>
            <button type="submit" class="settings-btn-secondary full">Update MPIN</button>
        </form>
    @endif

    @if($user->chat_password_last_changed_at)
        <p class="settings-mpin-meta">Last changed {{ $user->chat_password_last_changed_at->diffForHumans() }}</p>
    @endif
</section>