[FEAT] 完善機台授權模組：新增搜尋過濾功能、機台資訊排版優化、更換圖格裝飾並完成後端效能優化。

app/Http/Controllers/Admin/BasicSettings/MachineSettingController.php

@@ -14,6 +14,7 @@ use Illuminate\Support\Facades\Storage;
 use Illuminate\Support\Str;
 
 use Illuminate\Support\Facades\Log;
+use App\Models\System\User;
 
 class MachineSettingController extends AdminController
 {
@@ -45,7 +46,18 @@ class MachineSettingController extends AdminController
         }
         $models_list = $modelQuery->latest()->paginate($per_page)->withQueryString();
 
-        // 3. 基礎下拉資料 (用於新增/編輯機台的彈窗)
+        // 3. 處理使用者清單 (Accounts Tab - 授權帳號)
+        $userQuery = User::query()->with('machines')->whereNotNull('company_id'); // 僅列出租戶帳號以供分配
+        if ($tab === 'accounts' && $search) {
+            $userQuery->where(function ($q) use ($search) {
+                $q->where('name', 'like', "%{$search}%")
+                  ->orWhere('username', 'like', "%{$search}%")
+                  ->orWhere('email', 'like', "%{$search}%");
+            });
+        }
+        $users_list = $userQuery->latest()->paginate($per_page)->withQueryString();
+
+        // 4. 基礎下拉資料 (用於新增/編輯機台的彈窗)
         $models = MachineModel::select('id', 'name')->get();
         $paymentConfigs = PaymentConfig::select('id', 'name')->get();
         $companies = \App\Models\System\Company::select('id', 'name', 'code')->get();
@@ -53,6 +65,7 @@ class MachineSettingController extends AdminController
         return view('admin.basic-settings.machines.index', compact(
             'machines', 
             'models_list', 
+            'users_list',
             'models', 
             'paymentConfigs', 
             'companies',
@@ -192,22 +205,83 @@ class MachineSettingController extends AdminController
 
     public function regenerateToken(Request $request, $serial): \Illuminate\Http\JsonResponse
     {
-        // 僅使用機台序號 (serial_no) 作為識別碼，最直覺且穩定
         $machine = Machine::where('serial_no', $serial)->firstOrFail();
-
         $newToken = \Illuminate\Support\Str::random(60);
         $machine->update(['api_token' => $newToken]);
 
-        \Log::info('Machine API Token Regenerated', [
-            'machine_id' => $machine->id, 
+        Log::info('Machine API Token Regenerated', [
+            'machine_id' => $machine->id,
             'serial_no' => $machine->serial_no,
             'user_id' => auth()->id()
         ]);
 
         return response()->json([
             'success' => true,
-            'api_token' => $newToken,
-            'message' => __('API Token regenerated successfully.')
+            'message' => __('API Token regenerated successfully.'),
+            'api_token' => $newToken
+        ]);
+    }
+
+    /**
+     * AJAX: 取得特定帳號的機台分配狀態 (從 MachineController 遷移)
+     */
+    public function getAccountMachines(User $user): \Illuminate\Http\JsonResponse
+    {
+        $currentUser = auth()->user();
+
+        // 安全檢查：只能操作自己公司的帳號（除非是系統管理員）
+        if (!$currentUser->isSystemAdmin() && $user->company_id !== $currentUser->company_id) {
+            return response()->json(['error' => 'Unauthorized'], 403);
+        }
+
+        // 取得該使用者所屬公司之所有機台
+        $machines = Machine::where('company_id', $user->company_id)
+            ->get(['id', 'name', 'serial_no']);
+            
+        $assignedIds = $user->machines()->pluck('machines.id')->toArray();
+
+        return response()->json([
+            'user' => $user,
+            'machines' => $machines,
+            'assigned_ids' => $assignedIds
+        ]);
+    }
+
+    /**
+     * AJAX: 儲存特定帳號的機台分配 (從 MachineController 遷移)
+     */
+    public function syncAccountMachines(Request $request, User $user): \Illuminate\Http\JsonResponse
+    {
+        $currentUser = auth()->user();
+
+        // 安全檢查
+        if (!$currentUser->isSystemAdmin() && $user->company_id !== $currentUser->company_id) {
+            return response()->json(['error' => 'Unauthorized'], 403);
+        }
+
+        $request->validate([
+            'machine_ids' => 'nullable|array',
+            'machine_ids.*' => 'exists:machines,id'
+        ]);
+
+        // 加固驗證：確保所有機台 ID 都屬於該使用者的公司
+        if ($request->has('machine_ids')) {
+            $machineIds = array_unique($request->machine_ids);
+            $validCount = Machine::where('company_id', $user->company_id)
+                ->whereIn('id', $machineIds)
+                ->count();
+            
+            if ($validCount !== count($machineIds)) {
+                return response()->json(['error' => 'Invalid machine IDs provided.'], 422);
+            }
+        }
+
+        $user->machines()->sync($request->machine_ids ?? []);
+
+        return response()->json([
+            'success' => true, 
+            'message' => __('Permissions updated successfully'),
+            'assigned_machines' => $user->machines()->select('machines.id', 'machines.name', 'machines.serial_no')->get()
         ]);
     }
 }