@extends('hms.layout')
@section('title','Outlook email & calendar')
@section('content')
<div class="card p-3 mb-3">
<h1 class="h4">Outlook email & calendar · {{ $organization->name }}</h1>
<p>Use your organisation’s Microsoft 365 mailbox for HMS emails and synchronise appointments to linked clinicians’ Outlook calendars.</p>
<div class="alert alert-info">Your Microsoft 365 administrator must register an application in your tenant and grant Microsoft Graph application access for <strong>Mail.Send</strong> and <strong>Calendars.ReadWrite</strong>. Limit its Exchange access to the intended service and clinician mailboxes. Microsoft staff sign-in settings remain separate.</div>
<form method="POST" action="{{ route('hms.outlook.update') }}" autocomplete="off">@csrf @method('PUT')
<div class="row g-3">
<div class="col-md-6"><label for="outlook-tenant" class="form-label">Directory (tenant) ID</label><input id="outlook-tenant" name="tenant_id" class="form-control" required maxlength="36" value="{{ old('tenant_id',$settings?->tenant_id) }}"></div>
<div class="col-md-6"><label for="outlook-client" class="form-label">Application (client) ID</label><input id="outlook-client" name="client_id" class="form-control" required maxlength="36" value="{{ old('client_id',$settings?->client_id) }}"></div>
<div class="col-md-6"><label for="outlook-secret" class="form-label">Client secret value</label><input id="outlook-secret" name="client_secret" type="password" class="form-control" autocomplete="new-password" @required(!$settings)><div class="form-text">Stored encrypted. Leave blank to keep the saved secret. The saved value is never displayed.</div></div>
<div class="col-md-6"><label for="outlook-sender" class="form-label">Organisation’s sending mailbox</label><input id="outlook-sender" name="sender_email" type="email" class="form-control" required maxlength="254" value="{{ old('sender_email',$settings?->sender_email) }}"><div class="form-text">Use a Microsoft 365 mailbox in this tenant. Emails use this address as the sender.</div></div>
<div class="col-md-6"><label for="outlook-email" class="form-label">HMS email delivery</label><select id="outlook-email" name="email_enabled" class="form-select"><option value="0" @selected(!old('email_enabled',$settings?->email_enabled))>Use existing platform email</option><option value="1" @selected(old('email_enabled',$settings?->email_enabled))>Send through Outlook</option></select></div>
<div class="col-md-6"><label for="outlook-calendar" class="form-label">Appointment calendar sync</label><select id="outlook-calendar" name="calendar_enabled" class="form-select"><option value="0" @selected(!old('calendar_enabled',$settings?->calendar_enabled))>Disabled</option><option value="1" @selected(old('calendar_enabled',$settings?->calendar_enabled))>Sync to linked clinicians’ calendars</option></select></div>
<div class="col-md-6"><label for="outlook-password" class="form-label">Your current HMS password</label><input id="outlook-password" name="current_password" type="password" class="form-control" required autocomplete="current-password"></div>
</div><button class="btn btn-primary mt-3">Save Outlook settings</button>
</form>
<p class="small text-muted mt-3 mb-0">Calendar sync runs about once a minute when the server scheduler is active. Future appointments are added automatically. Link clinicians’ Microsoft Object IDs in <a href="{{ route('hms.microsoft.index') }}">Microsoft sign-in settings</a> using the same tenant; staff sign-in does not need to be enabled. Calendar entries contain an appointment reference and a secure HMS link, with no patient names or clinical notes. Changes made in Outlook do not update HMS. Disabling sync leaves existing entries in Outlook.</p>
</div>
@if($settings)
<div class="card p-3 mb-3"><h2 class="h5">Check application credentials</h2><p class="small">Checks Microsoft authentication without sending an email or creating a calendar entry.</p>
<form method="POST" action="{{ route('hms.outlook.test') }}" class="d-flex gap-2">@csrf<label class="visually-hidden" for="outlook-test-password">Your current HMS password</label><input id="outlook-test-password" name="current_password" type="password" class="form-control" required autocomplete="current-password" placeholder="Your current HMS password"><button class="btn btn-outline-primary text-nowrap">Check credentials</button></form></div>
@endif
<div class="card p-3"><h2 class="h5">Calendar sync activity</h2>
<p class="small">Failed updates retry up to five times with increasing delays. Correct the connection or clinician link before queuing another retry. Email delivery status remains in the appointment workflow.</p>
<div class="table-responsive"><table class="table table-sm align-middle"><thead><tr><th>Appointment</th><th>Status</th><th>Attempts</th><th>Last synced</th><th>Action</th></tr></thead><tbody>
@forelse($events as $event)<tr><td>#{{ $event->appointment_id }}</td><td>{{ ucfirst($event->status) }}@if($event->last_error)<div class="small text-muted">{{ $event->last_error }}</div>@endif</td><td>{{ $event->attempts }}</td><td>{{ $event->synced_at ?? '—' }}</td><td>@if($event->status==='failed')<form method="POST" action="{{ route('hms.outlook.retry',$event->id) }}">@csrf<button class="btn btn-sm btn-outline-primary">Queue retry</button></form>@endif</td></tr>
@empty<tr><td colspan="5">No calendar activity yet.</td></tr>@endforelse
</tbody></table></div>{{ $events->links() }}
</div>
@endsection