{{--
    The Documents tab's table — docs/wireframes-v12/edit-booking.html
    (~lines 356-372).

    Shared by the edit and the show screens because it is a *read* of the
    booking's documents and not a form field: the twin rule of recipe §9 governs
    the create/edit form pair, and this panel is identical on both screens by
    definition — the same rows, the same actions, the same permissions.

        @include('bookings.partials.documents', ['booking' => $booking])

    The **Name** column is whose document the row is — the main customer or the
    co-owner picked in the upload screen's Co-Applicant select, which
    `customer_docs.customer_id` has always recorded and the tab simply never
    showed (CR-11). A client addition beyond the wireframe's table, and the name
    alone: main customer and co-owner render identically, because the client
    asked for the person and not for a role label.

    ## What each action is

      * **View** streams the file back as an attachment
        (`bookings.documents.download`). A link and not a form, because it reads
        and nothing else; the route binding is scoped to the booking, so a
        document id from another booking is a 404 from the router.
      * **Delete** is a plain button that opens the shared confirmation dialog
        and, on Confirm, sends the DELETE by ajax — never a link, because a GET
        that destroys data would be fired by any crawler or prefetch.

        It was a `<form method="DELETE">` with a `confirm()` guard until CR-15.3
        item H2. The client's instruction is verbatim: *"Same this delete popup
        implement in documents tab inside booking edit and view screen and don't
        reload page once delete just remove that row from table and show success
        message as a toaster message getting error then show error toaster."*
        The route, the gate and the controller method are unchanged — only the
        answer shape is new (`ajax() && wantsJson()`), so a browser with no
        Javascript still has nothing here to press and the server still refuses
        exactly what it refused before.

        The two `data-role` markers below are what nrems-document-delete.js acts
        on: `document-row` is the `<tr>` it removes, `document-table` is where it
        looks to decide whether the table is now empty, and `data-empty` carries
        the very sentence the `@if` above renders so the two states cannot drift.

    ## The three gates moved in CR-15 (decision D3)

    Upload was `bookings.edit`, Download `bookings.view` and Delete
    `bookings.delete`; they are now `customer_documents.create`, `.view` and
    `.delete`. The client's instruction is one permission scheme for documents
    everywhere, and this tab writes the same rows the standalone Customer
    Documents module writes. **The tab itself is not gated on any of the three**
    — it is part of the booking edit and show screens, which keep their own
    `bookings.*` gates — so a holder of `bookings.view` alone still reads the
    table and simply gets no controls on it. See BookingDocumentController's
    docblock, which carries the whole change.

    A **cancelled** booking is view-only (CR-8 §3.1): the Upload button and the
    per-row Delete disappear, and the downloads stay. Read-only does not mean
    unreadable.

    Every value here is escaped: the original filename is the one genuinely
    attacker-supplied string on the page and it goes out through `{{ }}` like
    everything else, including into the delete button's `data-name`, which the
    dialog then writes with `textContent`.

    ## What the including screen must also render

    `customer-documents/partials/delete-modal.blade.php`, at the END of its
    content section — outside every `.card`, for the clipping reason that
    partial's own header records. bookings/edit.blade.php and
    bookings/show.blade.php both do. Without it the delete buttons here do
    nothing at all, which is the honest failure for a missing dialog: no
    confirmation, so no deletion.
--}}
@php
    /** @var \App\Models\Booking $booking */
    $cancelled = $booking->isCancelled();
    $emptyMessage = 'No documents have been uploaded for this booking yet.';
@endphp
<div class="card">
    <div class="card-header">
        <h5><i class="fa-solid fa-folder-open card-header-icon" aria-hidden="true"></i>Documents</h5>
        @can('customer_documents.create')
            @unless ($cancelled)
                <a href="{{ route('bookings.documents.create', $booking) }}" class="btn btn-outline btn-sm">
                    <i class="fa-solid fa-upload" aria-hidden="true"></i>Upload Document
                </a>
            @endunless
        @endcan
    </div>

    @if ($booking->documents->isEmpty())
        <div class="card-body">
            <p class="bk-empty">{{ $emptyMessage }}</p>
        </div>
    @else
        <div class="table-wrapper table-responsive">
            <table class="data-table" data-role="document-table" data-empty="{{ $emptyMessage }}">
                <thead>
                    <tr>
                        <th>Document Type</th>
                        <th>Name</th>
                        <th>File Name</th>
                        <th>Uploaded By</th>
                        <th>Date</th>
                        <th>Actions</th>
                    </tr>
                </thead>
                <tbody>
                    @foreach ($booking->documents as $document)
                        <tr data-role="document-row">
                            <td class="fw-500">{{ $document->docType?->name ?? '—' }}</td>
                            <td>{{ $document->customer?->name ?? '—' }}</td>
                            <td>{{ $document->original_name }}</td>
                            <td>{{ $document->creator?->name ?? '—' }}</td>
                            <td>{{ $document->created_at?->format('d M Y') ?? '—' }}</td>
                            <td>
                                <div class="action-btns">
                                    @can('customer_documents.view')
                                        <a href="{{ route('bookings.documents.download', [$booking, $document]) }}"
                                           class="btn-icon-sm text-primary" title="View"
                                           aria-label="Download document">
                                            <i class="fa-solid fa-eye" aria-hidden="true"></i>
                                        </a>
                                    @endcan

                                    @can('customer_documents.delete')
                                        @unless ($cancelled)
                                            <button type="button" class="btn-icon-sm text-danger"
                                                    data-role="delete-document"
                                                    data-document="{{ $document->getKey() }}"
                                                    data-url="{{ route('bookings.documents.destroy', [$booking, $document]) }}"
                                                    data-name="{{ $document->original_name }}"
                                                    title="Delete" aria-label="Delete document">
                                                <i class="fa-solid fa-trash" aria-hidden="true"></i>
                                            </button>
                                        @endunless
                                    @endcan
                                </div>
                            </td>
                        </tr>
                    @endforeach
                </tbody>
            </table>
        </div>
    @endif
</div>