{# Admin chrome: fixed left rail with labeled section groups.

   Inputs (from `bragi.apps.admin._inject_admin_context`):
   - site_nav_groups:   list[(section, list[NavItem])]  (rail body;
                          sections write / reach / manage, in-site only)
   - global_nav_groups: list[(section, list[NavItem])]  (rail foot;
                          the Platform group: Sites, Audit, sessions)
   - account_menu_items: list[NavItem]                  (account menu)
   - user_visible_sites: list[Site]                     (site switcher)
   - current_site / current_user_email / current_user_display_name

   The breadcrumb row and the mobile toggle (checkbox + hamburger)
   live in `base.html`, which owns the layout shell. This partial is
   just the <aside>. Zero JavaScript: the switcher and account menu
   are <details>; the mobile rail is driven by `#nav-toggle` in CSS.

   The section label IS the section key, uppercased in CSS; it carries
   the nav structure (write / reach / manage / platform), so it's
   typographic, not decorative. #}

{% macro nav_link(item) -%}
  <a class="rail-link{% if request.endpoint == item.endpoint %} is-current{% endif %}"
     href="{{ url_for(item.endpoint) }}">{{ item.label }}</a>
{%- endmacro %}

{% macro nav_group(section_name, items) -%}
  <div class="rail-group">
    <p class="rail-group__label">{{ section_name }}</p>
    {% for item in items %}{{ nav_link(item) }}{% endfor %}
  </div>
{%- endmacro %}

<aside class="admin-rail" aria-label="Admin navigation">
  <div class="rail-head">
    <span class="rail-brand">bragi</span>
    <details class="rail-switcher">
      <summary>
        {% if current_site %}
          {{ current_site.title or current_site.hostname }} ▾
        {% else %}
          Choose a site ▾
        {% endif %}
      </summary>
      <div class="dropdown-panel">
        {% for site in user_visible_sites if not (current_site and site.id == current_site.id) %}
          <a href="{{ url_for('site_admin.site_dashboard', site_slug=site.slug) }}">
            {{ site.title or site.hostname }}
          </a>
        {% else %}
          <a class="muted" href="{{ url_for('site_admin.list_sites') }}">No other sites</a>
        {% endfor %}
      </div>
    </details>
  </div>

  {# Body: site sections (only inside a site context).

     Boosted: section links swap only `.admin-content` (rail persists,
     URL pushes), so they feel instant instead of a full document
     reload. The attributes inherit to the descendant <a>; the switcher
     and account menu (outside these <nav>s) stay plain links so logout
     and cross-site jumps do a normal navigation. The active highlight
     is moved client-side after the swap (see base.html); without JS the
     links degrade to ordinary anchors with the server-rendered
     `is-current`. #}
  <nav class="rail-body" aria-label="Site navigation"
       hx-boost="true" hx-target=".admin-content"
       hx-select=".admin-content" hx-swap="outerHTML show:window:top">
    {% if current_site and site_nav_groups %}
      {% for section_name, items in site_nav_groups %}
        {{ nav_group(section_name, items) }}
      {% endfor %}
    {% endif %}
  </nav>

  {# Foot: the Platform group + the account menu. #}
  <div class="rail-foot">
    <nav aria-label="Platform navigation"
         hx-boost="true" hx-target=".admin-content"
         hx-select=".admin-content" hx-swap="outerHTML show:window:top">
      {% for section_name, items in global_nav_groups %}
        {{ nav_group(section_name, items) }}
      {% endfor %}
    </nav>

    {% if current_user_email %}
      <details id="user-menu" class="rail-account">
        <summary>
          <span class="user-avatar"
                style="background:hsl({{ (session.get('user_id', 0) * 137.5) % 360 }}, 50%, 40%)">
            {{ (current_user_display_name or current_user_email)[:1] | upper }}
          </span>
          {{ current_user_display_name or current_user_email }} ▾
        </summary>
        <div class="dropdown-panel">
          {% for item in account_menu_items %}
            <a href="{{ url_for(item.endpoint) }}">{{ item.label }}</a>
          {% endfor %}
          <hr>
          <form method="post" action="{{ url_for('auth_local.logout') }}">
            <input type="hidden" name="_csrf_token" value="{{ csrf_token() }}">
            <button type="submit">Logout</button>
          </form>
        </div>
      </details>
    {% endif %}
  </div>
</aside>