@php
    /** @var \App\Models\User|null $user */
    $user = auth()->user();

    $isSuperAdmin = $user?->isSuperAdmin() ?? false;

    // M01: the account switcher is a SUPER-ADMIN-ONLY control. A
    // non-super-admin renders NOTHING here — no switcher, and no
    // read-only indicator (they operate within their single bound
    // account). The SwitchAccountController also refuses their switches
    // server-side (defence in depth). See
    // docs/decisions/M01-decisions.md (D2, D3).
    /** @var \App\Models\Account|null $current */
    $current = app(\App\Support\CurrentAccount::class)->get();

    // Super-admins see EVERY account on the platform (Account isn't
    // tenant-scoped — it IS the tenant root, so the unscoped read is
    // safe; ordered alphabetically). The pivot-member ids tag the rows
    // the super-admin enters via the `is_super_admin` escape hatch (not
    // real membership) with a "Platform access" pill. Only computed for
    // super-admins, since no one else renders the dropdown.
    $accounts = collect();
    $memberAccountIds = [];
    if ($isSuperAdmin) {
        $accounts = \App\Models\Account::query()->orderBy('name')->get();
        $memberAccountIds = $user
            ? $user->accounts()->pluck('accounts.id')->all()
            : [];
    }
@endphp

@if ($isSuperAdmin && $current)
    <flux:dropdown position="bottom" align="start" class="w-full" data-test="account-switcher">
        <flux:button
            variant="ghost"
            icon:trailing="chevrons-up-down"
            class="!w-full !justify-between"
        >
            <div class="flex min-w-0 flex-col items-start text-left">
                <span class="truncate text-sm font-semibold" data-test="account-switcher-name">
                    {{ $current->name }}
                </span>
                <span class="truncate text-xs text-zinc-500 dark:text-zinc-400" data-test="account-switcher-slug">
                    {{ $current->slug }}
                </span>
            </div>
        </flux:button>

        <flux:menu class="w-72">
            @foreach ($accounts as $account)
                @php
                    $isMember = in_array($account->id, $memberAccountIds, true);
                    $isPlatformAccess = $isSuperAdmin && ! $isMember;
                @endphp
                @if ($account->id === $current->id)
                    {{-- Currently active account. Marked active and
                         not clickable — switching to the current
                         account is a no-op. --}}
                    <flux:menu.item
                        icon="check"
                        disabled
                        data-test="account-switcher-item-current"
                        data-account-id="{{ $account->id }}"
                    >
                        <div class="flex flex-col">
                            <div class="flex items-center gap-1.5">
                                <span class="font-medium">{{ $account->name }}</span>
                                @if ($isPlatformAccess)
                                    <flux:badge size="sm" color="amber" data-test="account-switcher-platform-pill">
                                        {{ __('Platform access') }}
                                    </flux:badge>
                                @endif
                            </div>
                            <span class="text-xs text-zinc-500 dark:text-zinc-400">{{ $account->slug }}</span>
                        </div>
                    </flux:menu.item>
                @else
                    {{-- Other accounts the user can switch to.
                         Each is a CSRF-protected POST to
                         account.switch. The controller is the
                         authoritative security boundary — the
                         account id in the URL is untrusted input,
                         and the super-admin escape hatch lives
                         server-side, not in this view. --}}
                    <form
                        method="POST"
                        action="{{ route('account.switch', $account) }}"
                        class="w-full"
                        data-test="account-switcher-form"
                        data-account-slug="{{ $account->slug }}"
                        data-account-id="{{ $account->id }}"
                        @if ($isPlatformAccess) data-platform-access="true" @endif
                    >
                        @csrf
                        <flux:menu.item
                            as="button"
                            type="submit"
                            class="w-full cursor-pointer"
                            data-test="account-switcher-item"
                        >
                            <div class="flex flex-col">
                                <div class="flex items-center gap-1.5">
                                    <span class="font-medium">{{ $account->name }}</span>
                                    @if ($isPlatformAccess)
                                        <flux:badge size="sm" color="amber" data-test="account-switcher-platform-pill">
                                            {{ __('Platform access') }}
                                        </flux:badge>
                                    @endif
                                </div>
                                <span class="text-xs text-zinc-500 dark:text-zinc-400">{{ $account->slug }}</span>
                            </div>
                        </flux:menu.item>
                    </form>
                @endif
            @endforeach
        </flux:menu>
    </flux:dropdown>
@endif