@php
$secuGroups = $acl->filter(fn($e) => str_starts_with($e->principal, 'SECU-'))->unique(fn($e) => $e->principal . '|' . $e->droits . '|' . $e->est_herite);
$directUsers = $acl->filter(fn($e) => !str_starts_with($e->principal, 'SECU-') && !$e->est_herite)->unique(fn($e) => $e->principal . '|' . $e->droits);
$inheritedAll = $acl->filter(fn($e) => $e->est_herite && !str_starts_with($e->principal, 'SECU-'));
@endphp
@if($secuGroups->isNotEmpty() || $directUsers->isNotEmpty() || $inheritedAll->isNotEmpty())
    @if(!empty($filtre))
    <div class="relative mb-2">
        <input type="text" x-model="q" placeholder="Filtrer par utilisateur / groupe / email…"
               class="w-full px-3 py-1.5 pr-8 border border-gray-300 rounded text-sm focus:outline-none focus:ring-1 focus:ring-indigo-500">
        @if(isset($totalFiltres))
        <span class="absolute right-2 top-1/2 -translate-y-1/2 text-xs text-gray-400">{{ $totalFiltres }}</span>
        @endif
    </div>
    @elseif(isset($totalFiltres))
    <p class="text-xs text-gray-500 mb-1">{{ $totalFiltres }} entrée(s) ACL</p>
    @endif

    <div class="space-y-0.5">
        @if($secuGroups->isNotEmpty())
            <div class="text-xs font-semibold text-blue-700 mt-1">Groupes SECU-</div>
            @foreach($secuGroups as $entry)
                @include('permissions._acl_entry', ['entry' => $entry, 'filtre' => $filtre ?? false])
            @endforeach
        @endif
        @if($directUsers->isNotEmpty())
            <div class="text-xs font-semibold text-orange-700 mt-2">Utilisateurs directs</div>
            @foreach($directUsers as $entry)
                @include('permissions._acl_entry', ['entry' => $entry, 'filtre' => $filtre ?? false])
            @endforeach
        @endif
        @if($inheritedAll->isNotEmpty())
            <div class="text-xs font-semibold text-gray-500 mt-2">Hérités (autres)</div>
            @foreach($inheritedAll as $entry)
                @include('permissions._acl_entry', ['entry' => $entry, 'filtre' => $filtre ?? false])
            @endforeach
        @endif
    </div>

    <div class="mt-3 border-t border-gray-100 pt-2 flex flex-wrap gap-x-3 gap-y-1 text-[10px] text-gray-400">
        <span class="perm-groupe">Groupe</span>
        <span class="perm-utilisateur">Utilisateur</span>
        <span><span class="inline-block w-2 h-2 rounded bg-emerald-500"></span> Lecture</span>
        <span><span class="inline-block w-2 h-2 rounded bg-amber-500"></span> Modification</span>
        <span><span class="inline-block w-2 h-2 rounded bg-red-500"></span> Contrôle total</span>
        <span><span class="inline-block w-2 h-2 rounded bg-sky-500"></span> Lecture &amp; exécution</span>
    </div>
@else
    <p class="text-xs text-gray-400 italic">Aucune entrée ACL sur ce dossier.</p>
@endif