{% extends "config/base.html" %}
{% import "site_shell/_macros.html" as ui %}

{% block title %}Edit {{ role.name }} - Pychestrate Configuration{% endblock %}

{% block content %}
<div class="page-header">
    <h1>Edit Role: {{ role.name }}</h1>
    <p>Update role permissions {{ ui.learn_more("01-00-overview", "concepts") }}</p>
</div>

<div class="card">
    <form method="post">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        {{ ui.error_summary(errors, error_labels) }}

        <div class="form-group">
            <label for="ro-role-name">Role Name</label>
            <input type="text" class="form-control" value="{{ role.name }}" id="ro-role-name" disabled aria-describedby="ro-role-name-help">
            <p id="ro-role-name-help" class="form-text">Role name cannot be changed</p>
        </div>
        
        <div class="form-group">
            <label for="description">Description</label>
            <textarea id="description" name="description" class="form-control" rows="3">{{ submitted.description if submitted else (role.description or '') }}</textarea>
        </div>
        
        {% if permissions %}
        <div class="form-group">
            <label id="permission_keys-label">Permissions</label>
            <div id="permission_keys" role="group" aria-labelledby="permission_keys-label"{% if errors and 'permission_keys' in errors %} aria-describedby="permission_keys-error"{% endif %} tabindex="-1">
                {{ ui.permission_picker(permissions, current_permission_keys) }}
            </div>
            {{ ui.field_error(errors, 'permission_keys') }}
        </div>
        {% endif %}

        <details class="form-group"{% if errors and 'permission_keys' in errors %} open{% endif %}>
            <summary class="muted">Removing every permission from this role?</summary>
            <label class="regular mt-sm">
                <input type="checkbox" name="confirm_remove_all" aria-describedby="confirm-remove-all-note">
                Yes, save this role with no permissions
            </label>
            <p class="form-text" id="confirm-remove-all-note">
                Only needed when no permission is selected above; it prevents
                accidentally wiping the role's grants.
            </p>
        </details>
        
        <div class="actions-row">
            <button type="submit" class="btn btn-primary">
                {{ ui.icon("save") }} Save Changes
            </button>
            <a href="{{ url_for('config.role_detail', role_id=role.id) }}" class="btn btn-secondary">Cancel</a>
        </div>
    </form>
</div>
{% include "site_shell/_permission_filter.html" %}
{% endblock %}