staff update

app/Http/Controllers/Admin/AdminAuthController.php

@@ -5,50 +5,52 @@ namespace App\Http\Controllers\Admin;
 use App\Http\Controllers\Controller;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
-use Illuminate\Support\Facades\Hash;
-use App\Models\Admin;
-
-
 
 class AdminAuthController extends Controller
 {
-    /**
-     * Show the admin login page
-     */
     public function showLoginForm()
     {
         return view('admin.login');
     }
 
-    /**
-     * Handle admin login
-     */
     public function login(Request $request)
     {
         $request->validate([
-            'email'    => 'required|email',
+            'login'    => 'required',
             'password' => 'required|string|min:6',
         ]);
 
-        // Try to log in using the 'admin' guard
-        if (Auth::guard('admin')->attempt($request->only('email', 'password'))) {
-            return redirect()->route('admin.dashboard')->with('success', 'Welcome back, Admin!');
+        $loginInput = $request->input('login');
+
+        if (filter_var($loginInput, FILTER_VALIDATE_EMAIL)) {
+            $field = 'email';
+        } elseif (preg_match('/^EMP\d+$/i', $loginInput)) {
+            $field = 'employee_id';
+        } else {
+            $field = 'username';
         }
 
-        return back()->withErrors(['email' => 'Invalid email or password.']);
+        $credentials = [
+            $field => $loginInput,
+            'password' => $request->password,
+        ];
+
+        // attempt login
+        if (Auth::guard('admin')->attempt($credentials)) {
+            $request->session()->regenerate();
+            $user = Auth::guard('admin')->user();
+
+            return redirect()->route('admin.dashboard')->with('success', 'Welcome back, ' . $user->name . '!');
+        }
+
+        return back()->withErrors(['login' => 'Invalid login credentials.']);
     }
 
-    /**
-     * Logout admin
-     */
     public function logout(Request $request)
     {
         Auth::guard('admin')->logout();
-
-        // Destroy the session completely
         $request->session()->invalidate();
         $request->session()->regenerateToken();
-
         return redirect()->route('admin.login')->with('success', 'Logged out successfully.');
     }
 }

app/Http/Controllers/Admin/AdminOrderController.php

@@ -148,6 +148,7 @@ class AdminOrderController extends Controller
 
         // recalc totals and save to order
         $this->recalcTotals($order);
+        $this->updateInvoiceFromOrder($order); // <-- NEW
 
         return redirect()->back()->with('success', 'Item added and totals updated.');
     }
@@ -164,6 +165,8 @@ class AdminOrderController extends Controller
 
         // recalc totals
         $this->recalcTotals($order);
+        $this->updateInvoiceFromOrder($order);
+
 
         return redirect()->back()->with('success', 'Item deleted and totals updated.');
     }
@@ -180,6 +183,8 @@ class AdminOrderController extends Controller
 
         // recalc totals
         $this->recalcTotals($order);
+        $this->updateInvoiceFromOrder($order);
+
 
         return redirect()->back()->with('success', 'Item restored and totals updated.');
     }
@@ -383,79 +388,79 @@ class AdminOrderController extends Controller
         return view('admin.orders', compact('orders'));
     }
     
-// inside AdminOrderController
+    // inside AdminOrderController
 
-private function buildOrdersQueryFromRequest(Request $request)
-{
-    $query = Order::with(['markList', 'invoice', 'shipments']);
+    private function buildOrdersQueryFromRequest(Request $request)
+    {
+        $query = Order::with(['markList', 'invoice', 'shipments']);
 
-    // Search across order_id, markList.company_name, markList.customer_id, invoice.invoice_number
-    if ($request->filled('search')) {
-        $search = $request->search;
-        $query->where(function($q) use ($search) {
-            $q->where('order_id', 'like', "%{$search}%")
-              ->orWhereHas('markList', function($q2) use ($search) {
-                  $q2->where('company_name', 'like', "%{$search}%")
-                     ->orWhere('customer_id', 'like', "%{$search}%");
-              })
-              ->orWhereHas('invoice', function($q3) use ($search) {
-                  $q3->where('invoice_number', 'like', "%{$search}%");
-              });
-        });
+        // Search across order_id, markList.company_name, markList.customer_id, invoice.invoice_number
+        if ($request->filled('search')) {
+            $search = $request->search;
+            $query->where(function($q) use ($search) {
+                $q->where('order_id', 'like', "%{$search}%")
+                ->orWhereHas('markList', function($q2) use ($search) {
+                    $q2->where('company_name', 'like', "%{$search}%")
+                        ->orWhere('customer_id', 'like', "%{$search}%");
+                })
+                ->orWhereHas('invoice', function($q3) use ($search) {
+                    $q3->where('invoice_number', 'like', "%{$search}%");
+                });
+            });
+        }
+
+        // Invoice status filter
+        if ($request->filled('status')) {
+            $query->whereHas('invoice', function($q) use ($request) {
+                $q->where('status', $request->status);
+            });
+        }
+
+        // Shipment status filter
+        if ($request->filled('shipment')) {
+            $query->whereHas('shipments', function($q) use ($request) {
+                $q->where('status', $request->shipment);
+            });
+        }
+
+        // optional ordering
+        $query->latest('id');
+
+        return $query;
     }
 
-    // Invoice status filter
-    if ($request->filled('status')) {
-        $query->whereHas('invoice', function($q) use ($request) {
-            $q->where('status', $request->status);
-        });
+    public function downloadPdf(Request $request)
+    {
+        // Build same filtered query used for table
+        $query = $this->buildOrdersQueryFromRequest($request);
+
+        $orders = $query->get();
+
+        // optional: pass filters to view for header
+        $filters = [
+            'search' => $request->search ?? null,
+            'status' => $request->status ?? null,
+            'shipment' => $request->shipment ?? null,
+        ];
+
+        $pdf = PDF::loadView('admin.orders.pdf', compact('orders', 'filters'))
+                ->setPaper('a4', 'landscape'); // adjust if needed
+
+        $fileName = 'orders-report'
+                . ($filters['status'] ? "-{$filters['status']}" : '')
+                . '-' . date('Y-m-d') . '.pdf';
+
+        return $pdf->download($fileName);
     }
 
-    // Shipment status filter
-    if ($request->filled('shipment')) {
-        $query->whereHas('shipments', function($q) use ($request) {
-            $q->where('status', $request->shipment);
-        });
+    public function downloadExcel(Request $request)
+    {
+        // pass request to OrdersExport which will build Filtered query internally
+        return Excel::download(new OrdersExport($request), 'orders-report-' . date('Y-m-d') . '.xlsx');
     }
 
-    // optional ordering
-    $query->latest('id');
 
-    return $query;
-}
-
-public function downloadPdf(Request $request)
-{
-    // Build same filtered query used for table
-    $query = $this->buildOrdersQueryFromRequest($request);
-
-    $orders = $query->get();
-
-    // optional: pass filters to view for header
-    $filters = [
-        'search' => $request->search ?? null,
-        'status' => $request->status ?? null,
-        'shipment' => $request->shipment ?? null,
-    ];
-
-    $pdf = PDF::loadView('admin.orders.pdf', compact('orders', 'filters'))
-              ->setPaper('a4', 'landscape'); // adjust if needed
-
-    $fileName = 'orders-report'
-              . ($filters['status'] ? "-{$filters['status']}" : '')
-              . '-' . date('Y-m-d') . '.pdf';
-
-    return $pdf->download($fileName);
-}
-
-public function downloadExcel(Request $request)
-{
-    // pass request to OrdersExport which will build Filtered query internally
-    return Excel::download(new OrdersExport($request), 'orders-report-' . date('Y-m-d') . '.xlsx');
-}
-
-
-public function addTempItem(Request $request)
+    public function addTempItem(Request $request)
     {
         // Validate item fields
         $item = $request->validate([
@@ -509,184 +514,228 @@ public function addTempItem(Request $request)
     // -------------------------------------------------------------------------
 
     public function finishOrder(Request $request)
-{
-    $request->validate([
-        'mark_no' => 'required',
-        'origin' => 'required',
-        'destination' => 'required',
-    ]);
+    {
+        $request->validate([
+            'mark_no' => 'required',
+            'origin' => 'required',
+            'destination' => 'required',
+        ]);
 
-    $items = session('temp_order_items', []);
+        $items = session('temp_order_items', []);
 
-    if (empty($items)) {
-        return redirect()->to(route('admin.orders.index') . '#createOrderForm')
-                         ->with('error', 'Add at least one item before finishing.');
-    }
+        if (empty($items)) {
+            return redirect()->to(route('admin.orders.index') . '#createOrderForm')
+                            ->with('error', 'Add at least one item before finishing.');
+        }
 
-    // =======================
-    // GENERATE ORDER ID
-    // =======================
-    $year = date('y');
-    $prefix = "KNT-$year-";
+        // =======================
+        // GENERATE ORDER ID
+        // =======================
+        $year = date('y');
+        $prefix = "KNT-$year-";
 
-    $lastOrder = Order::latest('id')->first();
-    $nextNumber = $lastOrder ? intval(substr($lastOrder->order_id, -8)) + 1 : 1;
+        $lastOrder = Order::latest('id')->first();
+        $nextNumber = $lastOrder ? intval(substr($lastOrder->order_id, -8)) + 1 : 1;
 
-    $orderId = $prefix . str_pad($nextNumber, 8, '0', STR_PAD_LEFT);
+        $orderId = $prefix . str_pad($nextNumber, 8, '0', STR_PAD_LEFT);
 
-    // =======================
-    // TOTAL SUMS
-    // =======================
-    $total_ctn = array_sum(array_column($items, 'ctn'));
-    $total_qty = array_sum(array_column($items, 'qty'));
-    $total_ttl_qty = array_sum(array_column($items, 'ttl_qty'));
-    $total_amount = array_sum(array_column($items, 'ttl_amount'));
-    $total_cbm = array_sum(array_column($items, 'cbm'));
-    $total_ttl_cbm = array_sum(array_column($items, 'ttl_cbm'));
-    $total_kg = array_sum(array_column($items, 'kg'));
-    $total_ttl_kg = array_sum(array_column($items, 'ttl_kg'));
+        // =======================
+        // TOTAL SUMS
+        // =======================
+        $total_ctn = array_sum(array_column($items, 'ctn'));
+        $total_qty = array_sum(array_column($items, 'qty'));
+        $total_ttl_qty = array_sum(array_column($items, 'ttl_qty'));
+        $total_amount = array_sum(array_column($items, 'ttl_amount'));
+        $total_cbm = array_sum(array_column($items, 'cbm'));
+        $total_ttl_cbm = array_sum(array_column($items, 'ttl_cbm'));
+        $total_kg = array_sum(array_column($items, 'kg'));
+        $total_ttl_kg = array_sum(array_column($items, 'ttl_kg'));
 
-    // =======================
-    // CREATE ORDER
-    // =======================
-    $order = Order::create([
-        'order_id' => $orderId,
-        'mark_no' => $request->mark_no,
-        'origin' => $request->origin,
-        'destination' => $request->destination,
-        'ctn' => $total_ctn,
-        'qty' => $total_qty,
-        'ttl_qty' => $total_ttl_qty,
-        'ttl_amount' => $total_amount,
-        'cbm' => $total_cbm,
-        'ttl_cbm' => $total_ttl_cbm,
-        'kg' => $total_kg,
-        'ttl_kg' => $total_ttl_kg,
-        'status' => 'pending',
-    ]);
+        // =======================
+        // CREATE ORDER
+        // =======================
+        $order = Order::create([
+            'order_id' => $orderId,
+            'mark_no' => $request->mark_no,
+            'origin' => $request->origin,
+            'destination' => $request->destination,
+            'ctn' => $total_ctn,
+            'qty' => $total_qty,
+            'ttl_qty' => $total_ttl_qty,
+            'ttl_amount' => $total_amount,
+            'cbm' => $total_cbm,
+            'ttl_cbm' => $total_ttl_cbm,
+            'kg' => $total_kg,
+            'ttl_kg' => $total_ttl_kg,
+            'status' => 'pending',
+        ]);
 
-    // SAVE ORDER ITEMS
-    foreach ($items as $item) {
-        OrderItem::create([
+        // SAVE ORDER ITEMS
+        foreach ($items as $item) {
+            OrderItem::create([
+                'order_id' => $order->id,
+                'description' => $item['description'],
+                'ctn' => $item['ctn'],
+                'qty' => $item['qty'],
+                'ttl_qty' => $item['ttl_qty'],
+                'unit' => $item['unit'],
+                'price' => $item['price'],
+                'ttl_amount' => $item['ttl_amount'],
+                'cbm' => $item['cbm'],
+                'ttl_cbm' => $item['ttl_cbm'],
+                'kg' => $item['kg'],
+                'ttl_kg' => $item['ttl_kg'],
+                'shop_no' => $item['shop_no'],
+            ]);
+        }
+
+        // =======================
+        // INVOICE CREATION START
+        // =======================
+
+        // 1. Auto-generate invoice number
+        $lastInvoice = \App\Models\Invoice::latest()->first();
+        $nextInvoice = $lastInvoice ? $lastInvoice->id + 1 : 1;
+        $invoiceNumber = 'INV-' . date('Y') . '-' . str_pad($nextInvoice, 6, '0', STR_PAD_LEFT);
+
+        // 2. Fetch customer (using mark list → customer_id)
+        $markList = MarkList::where('mark_no', $order->mark_no)->first();
+        $customer = null;
+
+        if ($markList && $markList->customer_id) {
+            $customer = \App\Models\User::where('customer_id', $markList->customer_id)->first();
+        }
+
+        // 3. Create Invoice Record
+        $invoice = \App\Models\Invoice::create([
             'order_id' => $order->id,
-            'description' => $item['description'],
-            'ctn' => $item['ctn'],
-            'qty' => $item['qty'],
-            'ttl_qty' => $item['ttl_qty'],
-            'unit' => $item['unit'],
-            'price' => $item['price'],
-            'ttl_amount' => $item['ttl_amount'],
-            'cbm' => $item['cbm'],
-            'ttl_cbm' => $item['ttl_cbm'],
-            'kg' => $item['kg'],
-            'ttl_kg' => $item['ttl_kg'],
-            'shop_no' => $item['shop_no'],
+            'customer_id' => $customer->id ?? null,
+            'mark_no' => $order->mark_no,
+
+            'invoice_number' => $invoiceNumber,
+            'invoice_date' => now(),
+            'due_date' => now()->addDays(10),
+
+            'payment_method' => null,
+            'reference_no' => null,
+            'status' => 'pending',
+
+            'final_amount' => $total_amount,
+            'gst_percent' => 0,
+            'gst_amount' => 0,
+            'final_amount_with_gst' => $total_amount,
+
+            // snapshot customer fields
+            'customer_name' => $customer->customer_name ?? null,
+            'company_name' => $customer->company_name ?? null,
+            'customer_email' => $customer->email ?? null,
+            'customer_mobile' => $customer->mobile_no ?? null,
+            'customer_address' => $customer->address ?? null,
+            'pincode' => $customer->pincode ?? null,
+
+            'notes' => null,
         ]);
+
+        // 4. Clone order items into invoice_items
+        foreach ($order->items as $item) {
+            \App\Models\InvoiceItem::create([
+                'invoice_id' => $invoice->id,
+                'description' => $item->description,
+                'ctn' => $item->ctn,
+                'qty' => $item->qty,
+                'ttl_qty' => $item->ttl_qty,
+                'unit' => $item->unit,
+                'price' => $item->price,
+                'ttl_amount' => $item->ttl_amount,
+                'cbm' => $item->cbm,
+                'ttl_cbm' => $item->ttl_cbm,
+                'kg' => $item->kg,
+                'ttl_kg' => $item->ttl_kg,
+                'shop_no' => $item->shop_no,
+            ]);
+        }
+
+        // 5. TODO: PDF generation (I will add this later)
+        $invoice->pdf_path = null; // placeholder for now
+        $invoice->save();
+
+        // =======================
+        // END INVOICE CREATION
+        // =======================
+
+        // CLEAR TEMP DATA
+        session()->forget(['temp_order_items', 'mark_no', 'origin', 'destination']);
+
+        return redirect()->route('admin.orders.index')
+                        ->with('success', 'Order + Invoice created successfully.');
     }
 
-    // =======================
-    // INVOICE CREATION START
-    // =======================
-
-    // 1. Auto-generate invoice number
-    $lastInvoice = \App\Models\Invoice::latest()->first();
-    $nextInvoice = $lastInvoice ? $lastInvoice->id + 1 : 1;
-    $invoiceNumber = 'INV-' . date('Y') . '-' . str_pad($nextInvoice, 6, '0', STR_PAD_LEFT);
-
-    // 2. Fetch customer (using mark list → customer_id)
-    $markList = MarkList::where('mark_no', $order->mark_no)->first();
-    $customer = null;
-
-    if ($markList && $markList->customer_id) {
-        $customer = \App\Models\User::where('customer_id', $markList->customer_id)->first();
-    }
-
-    // 3. Create Invoice Record
-    $invoice = \App\Models\Invoice::create([
-        'order_id' => $order->id,
-        'customer_id' => $customer->id ?? null,
-        'mark_no' => $order->mark_no,
-
-        'invoice_number' => $invoiceNumber,
-        'invoice_date' => now(),
-        'due_date' => now()->addDays(10),
-
-        'payment_method' => null,
-        'reference_no' => null,
-        'status' => 'pending',
-
-        'final_amount' => $total_amount,
-        'gst_percent' => 0,
-        'gst_amount' => 0,
-        'final_amount_with_gst' => $total_amount,
-
-        // snapshot customer fields
-        'customer_name' => $customer->customer_name ?? null,
-        'company_name' => $customer->company_name ?? null,
-        'customer_email' => $customer->email ?? null,
-        'customer_mobile' => $customer->mobile_no ?? null,
-        'customer_address' => $customer->address ?? null,
-        'pincode' => $customer->pincode ?? null,
-
-        'notes' => null,
-    ]);
-
-    // 4. Clone order items into invoice_items
-    foreach ($order->items as $item) {
-        \App\Models\InvoiceItem::create([
-            'invoice_id' => $invoice->id,
-            'description' => $item->description,
-            'ctn' => $item->ctn,
-            'qty' => $item->qty,
-            'ttl_qty' => $item->ttl_qty,
-            'unit' => $item->unit,
-            'price' => $item->price,
-            'ttl_amount' => $item->ttl_amount,
-            'cbm' => $item->cbm,
-            'ttl_cbm' => $item->ttl_cbm,
-            'kg' => $item->kg,
-            'ttl_kg' => $item->ttl_kg,
-            'shop_no' => $item->shop_no,
-        ]);
-    }
-
-    // 5. TODO: PDF generation (I will add this later)
-    $invoice->pdf_path = null; // placeholder for now
-    $invoice->save();
-
-    // =======================
-    // END INVOICE CREATION
-    // =======================
-
-    // CLEAR TEMP DATA
-    session()->forget(['temp_order_items', 'mark_no', 'origin', 'destination']);
-
-    return redirect()->route('admin.orders.index')
-                     ->with('success', 'Order + Invoice created successfully.');
-}
     // ---------------------------
     // ORDER CRUD: update / destroy
     // ---------------------------
-        public function updateItem(Request $request, $id)
+    public function updateItem(Request $request, $id)
     {
         $item = OrderItem::findOrFail($id);
+        $order = $item->order;
 
         $item->update([
             'description' => $request->description,
-            'ctn' => $request->ctn,
-            'qty' => $request->qty,
-            'ttl_qty' => $request->ttl_qty,
-            'unit' => $request->unit,
-            'price' => $request->price,
-            'ttl_amount' => $request->ttl_amount,
-            'cbm' => $request->cbm,
-            'ttl_cbm' => $request->ttl_cbm,
-            'kg' => $request->kg,
-            'ttl_kg' => $request->ttl_kg,
-            'shop_no' => $request->shop_no,
+            'ctn'         => $request->ctn,
+            'qty'         => $request->qty,
+            'ttl_qty'     => $request->ttl_qty,
+            'unit'        => $request->unit,
+            'price'       => $request->price,
+            'ttl_amount'  => $request->ttl_amount,
+            'cbm'         => $request->cbm,
+            'ttl_cbm'     => $request->ttl_cbm,
+            'kg'          => $request->kg,
+            'ttl_kg'      => $request->ttl_kg,
+            'shop_no'     => $request->shop_no,
         ]);
 
-        return back()->with('success', 'Item updated successfully!');
+        $this->recalcTotals($order);
+        $this->updateInvoiceFromOrder($order); // <-- NEW
+
+        return back()->with('success', 'Item updated successfully');
+    }
+
+
+    private function updateInvoiceFromOrder(Order $order)
+    {
+        $invoice = Invoice::where('order_id', $order->id)->first();
+
+        if (!$invoice) {
+            return; // No invoice exists (should not happen normally)
+        }
+
+        // Update invoice totals
+        $invoice->final_amount = $order->ttl_amount;
+        $invoice->gst_percent = 0;
+        $invoice->gst_amount = 0;
+        $invoice->final_amount_with_gst = $order->ttl_amount;
+        $invoice->save();
+
+        // Delete old invoice items
+        InvoiceItem::where('invoice_id', $invoice->id)->delete();
+
+        // Re-create invoice items from updated order items
+        foreach ($order->items as $item) {
+            InvoiceItem::create([
+                'invoice_id'  => $invoice->id,
+                'description' => $item->description,
+                'ctn'         => $item->ctn,
+                'qty'         => $item->qty,
+                'ttl_qty'     => $item->ttl_qty,
+                'unit'        => $item->unit,
+                'price'       => $item->price,
+                'ttl_amount'  => $item->ttl_amount,
+                'cbm'         => $item->cbm,
+                'ttl_cbm'     => $item->ttl_cbm,
+                'kg'          => $item->kg,
+                'ttl_kg'      => $item->ttl_kg,
+                'shop_no'     => $item->shop_no,
+            ]);
+        }
     }
 
 }

app/Http/Controllers/Admin/AdminStaffController.php

@@ -0,0 +1,179 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use App\Models\Admin;
+use Spatie\Permission\Models\Permission;
+use Illuminate\Support\Facades\DB;
+
+class AdminStaffController extends Controller
+{
+    public function index()
+    {
+        $staff = Admin::where('type', 'staff')->orderBy('id', 'DESC')->get();
+        return view('admin.staff.index', compact('staff'));
+    }
+
+    public function create()
+    {
+        $permissions = Permission::where('guard_name', 'admin')->get()->groupBy(function ($p) {
+            return explode('.', $p->name)[0];
+        });
+
+        return view('admin.staff.create', compact('permissions'));
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate([
+            // Personal Info
+            'name'            => 'required|string|max:255',
+            'email'           => 'required|email|unique:admins,email',
+            'phone'           => 'required|string|max:20',
+            'emergency_phone' => 'nullable|string|max:20',
+            'address'         => 'nullable|string|max:255',
+
+            // Professional info
+            'role'            => 'nullable|string|max:100',
+            'department'      => 'nullable|string|max:100',
+            'designation'     => 'nullable|string|max:100',
+            'joining_date'    => 'nullable|date',
+            'status'          => 'required|string|in:active,inactive',
+            'additional_info' => 'nullable|string',
+
+            // System access
+            'username'        => 'nullable|string|unique:admins,username',
+            'password'        => 'required|string|min:6',
+
+            // Permissions
+            'permissions'     => 'nullable|array',
+        ]);
+
+        DB::beginTransaction();
+
+        try {
+            $admin = Admin::create([
+                'name'            => $request->name,
+                'email'           => $request->email,
+                'phone'           => $request->phone,
+                'emergency_phone' => $request->emergency_phone,
+                'address'         => $request->address,
+
+                'role'            => $request->role,
+                'department'      => $request->department,
+                'designation'     => $request->designation,
+                'joining_date'    => $request->joining_date,
+                'status'          => $request->status,
+                'additional_info' => $request->additional_info,
+
+                'username'        => $request->username,
+                'password'        => Hash::make($request->password),
+                'type'            => 'staff',
+            ]);
+
+            // Generate EMPLOYEE ID using admin ID (safe)
+            $employeeId = 'EMP' . str_pad($admin->id, 4, '0', STR_PAD_LEFT);
+            $admin->update(['employee_id' => $employeeId]);
+
+            // Assign permissions (if any)
+            if ($request->permissions) {
+                $admin->givePermissionTo($request->permissions);
+            }
+
+            DB::commit();
+
+            return redirect()->route('admin.staff.index')
+                ->with('success', 'Staff created successfully.');
+
+        } catch (\Exception $e) {
+            DB::rollBack();
+            return back()->withErrors(['error' => $e->getMessage()]);
+        }
+    }
+
+    public function edit($id)
+    {
+        $staff = Admin::where('type', 'staff')->findOrFail($id);
+
+        $permissions = Permission::where('guard_name', 'admin')->get()->groupBy(function ($p) {
+            return explode('.', $p->name)[0];
+        });
+
+        $staffPermissions = $staff->permissions->pluck('name')->toArray();
+
+        return view('admin.staff.edit', compact('staff', 'permissions', 'staffPermissions'));
+    }
+
+    public function update(Request $request, $id)
+    {
+        $staff = Admin::where('type', 'staff')->findOrFail($id);
+
+        $request->validate([
+            'name'            => 'required|string|max:255',
+            'email'           => 'required|email|unique:admins,email,' . $staff->id,
+            'phone'           => 'required|string|max:20',
+            'emergency_phone' => 'nullable|string|max:20',
+            'address'         => 'nullable|string|max:255',
+
+            'role'            => 'nullable|string|max:100',
+            'department'      => 'nullable|string|max:100',
+            'designation'     => 'nullable|string|max:100',
+            'joining_date'    => 'nullable|date',
+            'status'          => 'required|string|in:active,inactive',
+            'additional_info' => 'nullable|string',
+
+            'username'        => 'nullable|string|unique:admins,username,' . $staff->id,
+            'password'        => 'nullable|string|min:6',
+
+            'permissions'     => 'nullable|array',
+        ]);
+
+        DB::beginTransaction();
+
+        try {
+            $staff->update([
+                'name'            => $request->name,
+                'email'           => $request->email,
+                'phone'           => $request->phone,
+                'emergency_phone' => $request->emergency_phone,
+                'address'         => $request->address,
+
+                'role'            => $request->role,
+                'department'      => $request->department,
+                'designation'     => $request->designation,
+                'joining_date'    => $request->joining_date,
+                'status'          => $request->status,
+                'additional_info' => $request->additional_info,
+
+                'username'        => $request->username,
+            ]);
+
+            if ($request->password) {
+                $staff->update(['password' => Hash::make($request->password)]);
+            }
+
+            $staff->syncPermissions($request->permissions ?? []);
+
+            DB::commit();
+
+            return redirect()->route('admin.staff.index')
+                ->with('success', 'Staff updated successfully.');
+
+        } catch (\Exception $e) {
+            DB::rollBack();
+            return back()->withErrors(['error' => $e->getMessage()]);
+        }
+    }
+
+    public function destroy($id)
+    {
+        $staff = Admin::where('type', 'staff')->findOrFail($id);
+        $staff->delete();
+
+        return redirect()->route('admin.staff.index')
+            ->with('success', 'Staff removed successfully.');
+    }
+}