{% extends "config/base.html" %}
{% import "site_shell/_macros.html" as ui %}

{% block title %}Roles - Pychestrate Configuration{% endblock %}

{% block content %}
<div class="page-header">
    <h1>Roles</h1>
    <p>Configure roles and their permissions</p>
</div>

<div class="toolbar toolbar--end">
    <a href="{{ url_for('config.role_list') }}?format=csv" class="btn btn-secondary" data-role="download-csv" title="Every role with its permissions, for an access review">
        {{ ui.icon("download") }} Download CSV
    </a>
    {% if may_change_roles %}
    <a href="{{ url_for('config.role_create') }}" class="btn btn-primary">
        {{ ui.icon("add") }} Create Role
    </a>
    {% endif %}
</div>

<div class="table-scroll" tabindex="0"><table class="data-table">
    <thead>
        <tr>
            <th scope="col">Name</th>
            <th scope="col">Description</th>
            <th scope="col">Type</th>
            <th scope="col">Permissions</th>
            <th scope="col">Assigned</th>
            <th scope="col">Actions</th>
        </tr>
    </thead>
    <tbody>
        {% for role in roles %}
        <tr>
            <td><a href="{{ url_for('config.role_detail', role_id=role.id) }}">{{ role.name }}</a></td>
            <td>{{ role.description or '—' }}</td>
            <td>
                {% if role.is_system %}
                <span class="badge badge-info">Built-in</span>
                {% else %}
                <span class="badge badge-success">Custom</span>
                {% endif %}
            </td>
            <td>{{ role.permissions | length }} permissions</td>
            <td>{{ role.binding_count }} user{{ '' if role.binding_count == 1 else 's' }}</td>
            <td>
                <div class="row-actions">
                    {% if may_change_roles %}
                    {% if not role.is_system %}
                    <a href="{{ url_for('config.role_edit', role_id=role.id) }}" class="btn btn-sm btn-secondary">Edit</a>
                    {% endif %}
                    <a href="{{ url_for('config.role_create') }}?copy_from={{ role.id }}" class="btn btn-sm btn-secondary" data-role="copy-role">Copy</a>
                    {% if not role.is_system %}
                    <form action="{{ url_for('config.role_delete', role_id=role.id) }}" method="post">
                        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
                        <button type="submit" class="btn btn-sm btn-quiet-danger" data-confirm-type="{{ role.name }}" data-confirm="Delete role {{ role.name }}? {{ role.binding_count }} user{{ '' if role.binding_count == 1 else 's' }} will lose this role.">Delete</button>
                    </form>
                    {% endif %}
                    {% elif role.is_system %}
                    <span class="muted">Built-in role</span>
                    {% endif %}
                </div>
            </td>
        </tr>
        {% else %}
        {{ ui.empty_state("No roles found", colspan=6) }}
        {% endfor %}
    </tbody>
</table></div>
{% endblock %}