@php($backupService=app(\App\Services\ManualBackups::class))
@php($identity=app(\App\Services\InstallationIdentity::class)->initialize())
@php($currentInstallation=app(\App\Services\InstallationIdentity::class)->current())
<article class="panel"><h2>Backups</h2><p>Owner only. Create backups manually when needed. Reset and restore never create automatic backups. Downloaded backups contain sensitive customer data, email credentials and encryption information; store them securely.</p>
<form method="post" action="{{ route('admin.backups.create') }}">@csrf<button class="button small" type="submit" data-maintenance-submit>Create backup</button></form>
<div class="table-wrap" style="margin-top:20px"><table><thead><tr><th>Backup file</th><th>Created on</th><th>Size</th><th>Actions</th></tr></thead><tbody>@forelse($backupService->listing() as $backup)<tr><td>{{ $backup['id'] }}</td><td>{{ \Carbon\Carbon::createFromTimestamp($backup['created'])->format('d M Y, H:i') }}</td><td>{{ number_format($backup['size']/1048576,2) }} MB</td><td><div style="display:flex;gap:8px;flex-wrap:wrap"><a class="button small secondary" href="{{ route('admin.backups.download',$backup['id']) }}">Download</a><form method="post" action="{{ route('admin.backups.preview',$backup['id']) }}">@csrf<button class="button small secondary" type="submit">Restore</button></form><form method="post" action="{{ route('admin.backups.delete',$backup['id']) }}" onsubmit="return confirm('Permanently delete this saved backup? Download it first if you want to keep a copy.')">@csrf @method('DELETE')<button class="button small secondary" type="submit">Delete</button></form></div></td></tr>@empty<tr><td colspan="4">No manual backups yet.</td></tr>@endforelse</tbody></table></div>
<details style="margin-top:20px"><summary>Upload a downloaded backup</summary><form class="stack-form" method="post" enctype="multipart/form-data" action="{{ route('admin.backups.upload') }}">@csrf<label>Backup ZIP file<input type="file" name="backup_file" accept=".zip,application/zip" required></label><small>The server’s upload limit also applies. Oversized files can be copied privately to storage/app/site-backups by your hosting administrator. Only matching backup versions are accepted.</small><button class="button small" type="submit">Upload and validate</button></form></details>
</article>
@if(session('restore_preview'))@php($restore=session('restore_preview'))<article class="panel"><h2>Review backup restoration</h2><p><strong>Source website:</strong> {{ $restore['website'] }}<br><strong>Created:</strong> {{ $restore['created'] }}<br><strong>Data version:</strong> {{ $restore['version'] }}</p><p>{{ $restore['counts']['users']??0 }} accounts · {{ $restore['counts']['receipt_submissions']??0 }} receipts · {{ $restore['counts']['digital_reward_pins']??0 }} PIN records. Database records and uploaded files will be replaced. Application code and manually saved backups are kept.</p><p><strong>Destination:</strong> {{ $settings->public_url ?: config('app.url') }}<br><strong>Database:</strong> {{ $currentInstallation['database'] }} ({{ $currentInstallation['driver'] }})</p><p>No backup will be created automatically. Create and download one first if needed. Restoring an older backup cannot establish whether a PIN was used externally. Review stock before re-enabling the wheel.</p><form class="stack-form" method="post" action="{{ route('admin.backups.restore') }}">@csrf<input type="hidden" name="preview_token" value="{{ $restore['token'] }}">@include('admin.partials.owner-confirmation')<label class="check"><input type="checkbox" name="separate_installation" value="1" required>I verified this is the intended database and storage; a copied site has its own database and storage.</label><label>Type RESTORE BACKUP<input name="confirmation" required pattern="RESTORE BACKUP" autocomplete="off"></label><small>The website address and hosting connections are kept. Sensitive values are recovered using the backup’s key and encrypted for this destination. Sign in afterward using an Owner account from the backup. The wheel will be disabled and campaign emails paused for review.</small><button class="button small secondary" type="submit" data-maintenance-submit>Restore backup and replace current data</button></form></article>@endif
@if(is_file(storage_path('app/campaign-email.paused')))<article class="panel"><h2>Campaign emails are paused</h2><p>Review the restored campaign, PIN stock and Email setup before resuming queued customer reward and stock-alert emails. Owner sign-in and confirmation emails remain available.</p><form class="stack-form" method="post" action="{{ route('admin.backups.resume') }}">@csrf @include('admin.partials.owner-confirmation')<label>Type RESUME EMAIL<input name="confirmation" required pattern="RESUME EMAIL"></label><button class="button small" type="submit">Resume campaign emails</button></form></article>@endif
<article class="panel"><h2>Factory reset</h2><p>Select items to remove. Unchecked items are kept. Related items are automatically selected and explained. The current Owner account, application features, website address and saved backups are always protected.</p><p><strong>Website:</strong> {{ $settings->public_url ?: config('app.url') }}<br><strong>Database:</strong> {{ $currentInstallation['database'] }} ({{ $currentInstallation['driver'] }})</p>
<form class="stack-form" method="post" action="{{ route('admin.factory-reset.preview') }}" data-factory-selection data-dependencies='@json(\App\Services\FactoryReset::DEPS)'>@csrf<div class="factory-reset-options">@foreach(\App\Services\FactoryReset::GROUPS as $key=>$label)<div><label class="check"><input type="checkbox" name="groups[]" value="{{ $key }}">{{ $label }}</label><small data-dependency-note="{{ $key }}"></small></div>@endforeach</div><small>Keeping PIN inventory keeps its statuses. Removing participation history retires reserved PINs; it does not make issued PINs available. Removing prizes clears associated slots and PIN inventory. Removing email credentials disables the configured email service. Old administrator activity can be removed, but the new reset action is always recorded.</small><button class="button small secondary" type="submit">Preview Factory reset</button></form></article>
@if(session('factory_preview'))@php($factory=session('factory_preview'))<article class="panel"><h2>Review Factory reset</h2><table><thead><tr><th>Selected for removal</th><th>Affected records / files</th></tr></thead><tbody>@foreach($factory['counts'] as $group=>$count)<tr><td>{{ \App\Services\FactoryReset::GROUPS[$group] }}</td><td>{{ $count }}</td></tr>@endforeach</tbody></table><details><summary>Items being kept</summary><ul>@foreach(\App\Services\FactoryReset::GROUPS as $group=>$label)@if(!in_array($group,$factory['groups'],true))<li>{{ $label }}</li>@endif @endforeach<li>Current Owner account, application code, website address and saved backups</li></ul></details><p>No automatic backup will be made. Create and download a manual backup first if needed. Preview expires after 15 minutes or when campaign data changes.</p><form class="stack-form" method="post" action="{{ route('admin.factory-reset.execute') }}">@csrf<input type="hidden" name="preview_token" value="{{ $factory['token'] }}">@include('admin.partials.owner-confirmation')<label class="check"><input type="checkbox" name="separate_installation" value="1" required>I checked the database and storage; this reset will not affect another site.</label><label>Type FACTORY RESET<input name="confirmation" required pattern="FACTORY RESET" autocomplete="off"></label><button class="button small secondary" type="submit" data-maintenance-submit>Remove selected items</button></form></article>@endif
@push('scripts')<style>.factory-reset-options{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:16px}.factory-reset-options>div{padding:12px;border:1px solid var(--line);border-radius:8px}.factory-reset-options small{display:block;line-height:1.5;margin:6px 0 0 24px;color:var(--muted)}@media(max-width:760px){.factory-reset-options{grid-template-columns:1fr}}</style><script src="{{ asset('wheel/site-maintenance.js') }}" defer></script>@endpush