<aside class="sidebar">
  <div class="brand">
    <div class="brand-mark"><span>S</span></div>
    <div><strong>Symlink</strong><span>Attendance OS</span></div>
  </div>
  <div class="nav-label"><%= sessionUser && sessionUser.role === 'ADMIN' ? 'Workspace' : 'My workspace' %></div>
  <nav>
    <% if (sessionUser && sessionUser.role === 'ADMIN') { %>
      <a class="<%= currentPath === '/admin' ? 'active':'' %>" href="/admin"><span class="nav-icon">⌂</span><span>Dashboard</span></a>
      <a class="<%= currentPath === '/admin/employees' ? 'active':'' %>" href="/admin/employees"><span class="nav-icon">◎</span><span>Employees</span></a>
      <a class="<%= currentPath === '/admin/reports' ? 'active':'' %>" href="/admin/reports"><span class="nav-icon">▤</span><span>Attendance reports</span></a>
      <a class="<%= currentPath === '/admin/reports/monthly' ? 'active':'' %>" href="/admin/reports/monthly"><span class="nav-icon">◫</span><span>Monthly summary</span></a>
      <a class="<%= currentPath === '/admin/reports/breaks' ? 'active':'' %>" href="/admin/reports/breaks"><span class="nav-icon">◴</span><span>Break & lunch</span></a>
      <a class="<%= currentPath === '/admin/reports/missing' ? 'active':'' %>" href="/admin/reports/missing"><span class="nav-icon">!</span><span>Missing records</span></a>
      <a class="<%= currentPath === '/admin/audit' ? 'active':'' %>" href="/admin/audit"><span class="nav-icon">◇</span><span>Audit log</span></a>
    <% } else { %>
      <a class="<%= currentPath === '/app' ? 'active':'' %>" href="/app"><span class="nav-icon">◉</span><span>Today</span></a>
      <a class="<%= currentPath === '/history' ? 'active':'' %>" href="/history"><span class="nav-icon">↻</span><span>History</span></a>
    <% } %>
  </nav>
  <div class="sidebar-note">
    <span class="secure-dot"></span>
    <div><strong>Server time protected</strong><small>Attendance is recorded securely</small></div>
  </div>
  <div class="sidebar-user">
    <div class="avatar"><%= (sessionUser?.name || 'U').slice(0,1).toUpperCase() %></div>
    <div class="user-copy"><strong><%= sessionUser?.name %></strong><span><%= sessionUser?.role === 'ADMIN' ? 'Administrator' : sessionUser?.email %></span></div>
    <form method="post" action="/logout"><button class="icon-btn" title="Sign out" aria-label="Sign out">↗</button></form>
  </div>
</aside>
