{% extends "config/base.html" %}
{% import "site_shell/_macros.html" as ui %}

{% block title %}{{ user.username }} - Pychestrate Configuration{% endblock %}

{% block content %}
<div class="page-header">
    <h1>User: {{ user.username }}</h1>
    <p>View user account details</p>
</div>

<div class="card narrow">
    <table class="btn-block">
        <tr>
            <th scope="row">Username</th>
            <td>{{ user.username }}</td>
        </tr>
        <tr>
            <th scope="row">Email</th>
            <td>{{ user.email }}</td>
        </tr>
        <tr>
            <th scope="row">Display Name</th>
            <td>{{ user.display_name }}</td>
        </tr>
        <tr>
            <th scope="row">First Name</th>
            <td>{{ user.firstname or '—' }}</td>
        </tr>
        <tr>
            <th scope="row">Last Name</th>
            <td>{{ user.lastname or '—' }}</td>
        </tr>
        <tr>
            <th scope="row">Status</th>
            <td>
                {% if user.status == 'anonymised' %}
                <span class="badge badge-secondary">Deleted</span>
                <span class="muted small">Personal data erased. It cannot be edited or reactivated; only the account's id stays, in the audit log.</span>
                {% elif user.status == 'invited' %}
                <span class="badge badge-secondary">Invited</span>
                <span class="muted small">No password yet &mdash; waiting for the user to open their invite link.</span>
                {% elif user.is_active %}
                <span class="badge badge-success">Active</span>
                {% else %}
                <span class="badge badge-secondary">Inactive</span>
                <span class="muted small">Cannot sign in until reactivated.</span>
                {% endif %}
            </td>
        </tr>
        <tr>
            <th scope="row">Roles</th>
            <td>{{ user.roles | join(', ') if user.roles else 'No roles assigned' }}</td>
        </tr>
        <tr>
            <th scope="row">Created</th>
            <td>{{ user.created_at | format_datetime('%Y-%m-%d %H:%M:%S', 'Unknown') }}</td>
        </tr>
        <tr>
            <th scope="row">Updated</th>
            <td>{{ user.updated_at | format_datetime('%Y-%m-%d %H:%M:%S', 'Never') }}</td>
        </tr>
    </table>
</div>

<div class="actions-row mt">
    {% if user.status != 'anonymised' %}
    <a href="{{ url_for('config.user_edit', user_id=user.id) }}" class="btn btn-primary">
        {{ ui.icon("edit") }} Edit User
    </a>
    {% endif %}
    {% if user.status == 'anonymised' %}
    {% elif user.id != current_user_id %}
    <a href="{{ url_for('config.user_password', user_id=user.id) }}" class="btn btn-secondary">
        {% if user.status == 'invited' %}New invite link{% else %}Reset password{% endif %}
    </a>
    {% else %}
    <a href="{{ url_for('config.account_password') }}" class="btn btn-secondary">Change my password</a>
    {% endif %}
    {% if user.is_active and user.id != current_user_id %}
    <form action="{{ url_for('config.user_deactivate', user_id=user.id) }}" method="post" data-confirm="Deactivate {{ user.username }}? They are signed out everywhere and cannot sign in until reactivated.">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <input type="hidden" name="return_to" value="detail">
        <button type="submit" class="btn btn-danger">
            {{ ui.icon("block") }} Deactivate
        </button>
    </form>
    {% elif user.status == 'inactive' and user.id != current_user_id %}
    <form action="{{ url_for('config.user_reactivate', user_id=user.id) }}" method="post">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <input type="hidden" name="return_to" value="detail">
        <button type="submit" class="btn btn-secondary">
            {{ ui.icon("check_circle") }} Reactivate
        </button>
    </form>
    <form action="{{ url_for('config.user_delete', user_id=user.id) }}" method="post" data-role="delete-form" data-confirm="Delete {{ user.username }}? Their name, email address, password, sign-in history, API tokens and memberships are erased permanently, and the account leaves the Users list. Only an id with no name stays, so the audit log still makes sense. This cannot be undone." data-confirm-type="{{ user.username }}">
        <input type="hidden" name="csrf_token" value="{{ csrf_token }}">
        <button type="submit" class="btn btn-danger">
            {{ ui.icon("delete") }} Delete
        </button>
    </form>
    {% endif %}
    <a href="{{ url_for('config.user_list') }}" class="btn btn-secondary">Back to List</a>
</div>
{% endblock %}