@php
    $authUser = auth()->user();
    $name = $authUser?->full_name ?: 'Admin';
    $role = $authUser?->isSuperAdmin() ? 'Super Admin' : 'Admin';
    $initials = collect(explode(' ', trim((string) $name)))
        ->filter()
        ->take(2)
        ->map(fn ($p) => mb_strtoupper(mb_substr($p, 0, 1)))
        ->implode('');
@endphp

<div class="topbar">
    <button class="nav-toggle ibtn" id="nav-toggle" type="button" aria-label="Open menu"><i class="fa-light fa-bars"></i></button>
    <button type="button" class="gsearch" style="cursor:text;text-align:left;font:inherit;"
            onclick="window.dispatchEvent(new CustomEvent('palette-open'))" aria-label="Open command palette">
        <i class="fa-light fa-magnifying-glass"></i>
        <span style="flex:1;color:#9aa6b4;">Search fundraisers, donations, requests&hellip;</span>
        <kbd>&#8984;K</kbd>
    </button>
    <div class="spacer"></div>

    <livewire:admin.notification-bell />

    <div class="tb-usermenu" x-data="{ open: false }" @keydown.escape.window="open = false">
        <button class="tb-user" type="button" @click.stop="open = !open" aria-haspopup="true" :aria-expanded="open">
            <span class="av">{{ $initials !== '' ? $initials : 'A' }}</span>
            <span>
                <span class="nm" style="display:block;">{{ $name }}</span>
                <span class="rl">{{ $role }}</span>
            </span>
            <i class="fa-light fa-chevron-down" :style="open ? 'transform:rotate(180deg)' : ''"></i>
        </button>

        <div class="tb-menu" :class="{ 'open': open }" @click.outside="open = false">
            <div class="tb-menu-head">
                <span class="nm">{{ $name }}</span>
                <span class="em">{{ $authUser?->email }}</span>
            </div>
            <a href="{{ route('admin.notifications') }}" wire:navigate class="tb-menu-item"><i class="fa-light fa-bell"></i> Notifications</a>
            @if ($authUser?->isSuperAdmin())
                <a href="{{ route('admin.settings') }}" wire:navigate class="tb-menu-item"><i class="fa-light fa-sliders"></i> Controlled Settings</a>
            @endif
            <a href="{{ route('admin.tasks') }}" wire:navigate class="tb-menu-item"><i class="fa-light fa-square-check"></i> My tasks</a>
            <a href="{{ route('admin.security.devices') }}" wire:navigate class="tb-menu-item"><i class="fa-light fa-shield-halved"></i> Trusted devices</a>
            <div class="tb-menu-sep"></div>
            {{-- D82: single logout — ends the central session for SSO logins, or just
                 the local session for a PIN break-glass login (handled in the controller). --}}
            <form method="POST" action="{{ route('sso.logout') }}">
                @csrf
                <button type="submit" class="tb-menu-item danger"><i class="fa-light fa-arrow-right-from-bracket"></i> Sign out</button>
            </form>
        </div>
    </div>
</div>